ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor2975146686 <...> [ 97.200222][ T199] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor2975146686", ["ci2-upstream-fs/syz-executor2975146686"], 0x7ffed2ac5040 /* 10 vars */) = 0 brk(NULL) = 0x55558daac000 brk(0x55558daacd80) = 0x55558daacd80 arch_prctl(ARCH_SET_FS, 0x55558daac400) = 0 set_tid_address(0x55558daac6d0) = 5599 set_robust_list(0x55558daac6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor2975146686", 4096) = 44 getrandom("\x29\x28\x4e\xec\x2b\xf5\xe8\x2f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558daacd80 brk(0x55558dacdd80) = 0x55558dacdd80 brk(0x55558dace000) = 0x55558dace000 mprotect(0x7f9113cd6000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5599}, {cmd=CTRL_CMD_NEWFAMILY, version=2}, [[{nla_len=13, nla_type=CTRL_ATTR_FAMILY_NAME}, "\x6e\x6c\x38\x30\x32\x31\x35\x34\x00"...], [{nla_len=6, nla_type=CTRL_ATTR_FAMILY_ID}, 0x1e], [{nla_len=8, nla_type=CTRL_ATTR_VERSION}, 1], [{nla_len=8, nla_type=CTRL_ATTR_HDRSIZE}, 0], [{nla_len=8, nla_type=CTRL_ATTR_MAXATTR}, 48], [{nla_len=744, nla_type=CTRL_ATTR_OPS}, [[{nla_len=20, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWFAMILY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELOPS], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x3}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x4}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x5}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x6}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xd /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x7}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xe /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x8}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xc /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x9}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x14 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xa}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETPOLICY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xb}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xb /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xc}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x10 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xd}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x11 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xe}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xf /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xf}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x12 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x10}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x13 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x11}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x23 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x12}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x24 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x13}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x26 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x14}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x27 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x15}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x28 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x16}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x29 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x17}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x18}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x19}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x15 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1a}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x16 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1b}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x17 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1c}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x18 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1d}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x19 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1e}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1f}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x20}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1c /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x21}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1d /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x22}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1e /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x23}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1f /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x24}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x20 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x25}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x21 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]]]], [{nla_len=52, nla_type=CTRL_ATTR_MCAST_GROUPS}, [[{nla_len=24, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xc], [{nla_len=11, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x63\x6f\x6e\x66\x69\x67\x00"...]]], [{nla_len=24, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xd], [{nla_len=9, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x73\x63\x61\x6e\x00"...]]]]]]], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0b\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa0\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=8, nla_type=IFLA_NUM_TX_QUEUES}, 2], [{nla_len=8, nla_type=IFLA_NUM_RX_QUEUES}, 2], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 84, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 84 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0c\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa1\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5599}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f9113c53860}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f9113c53860}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9113bec000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f9113bec000, stack_size=0x9000}, 88ci2-upstream-fs/strace-static-x86_64: Process 5602 attached [pid 5602] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 5602] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f9113c53860}, NULL, 8) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5602] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffebc4824c8 /* 10 vars */ [pid 5599] <... clone3 resumed>) = 5602 [pid 5599] munmap(0x7f9113bec000, 36864) = 0 [pid 5599] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 5602] <... execve resumed>) = 0 [pid 5602] brk(NULL) = 0x5619154df000 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efe7d0d5000 [pid 5602] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffe24cb9d90, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffe24cb9d90, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 5602] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7d013000 [pid 5602] mmap(0x7efe7d023000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7efe7d023000 [pid 5602] mmap(0x7efe7d0a9000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7efe7d0a9000 [pid 5602] mmap(0x7efe7d0d1000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7efe7d0d1000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5602] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 5602] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5602] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7ce33000 [pid 5602] mmap(0x7efe7ce5b000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7efe7ce5b000 [pid 5602] mmap(0x7efe7cfa9000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7efe7cfa9000 [pid 5602] mmap(0x7efe7d000000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7efe7d000000 [pid 5602] mmap(0x7efe7d006000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efe7d006000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 5602] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7ce22000 [pid 5602] mmap(0x7efe7ce25000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efe7ce25000 [pid 5602] mmap(0x7efe7ce2d000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7efe7ce2d000 [pid 5602] mmap(0x7efe7ce31000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7efe7ce31000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 5602] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7ce1b000 [pid 5602] mmap(0x7efe7ce1d000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7efe7ce1d000 [pid 5602] mmap(0x7efe7ce1f000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7efe7ce1f000 [pid 5602] mmap(0x7efe7ce20000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7efe7ce20000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 5602] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7ce0a000 [pid 5602] mmap(0x7efe7ce0d000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efe7ce0d000 [pid 5602] mmap(0x7efe7ce15000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7efe7ce15000 [pid 5602] mmap(0x7efe7ce17000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7efe7ce17000 [pid 5602] mmap(0x7efe7ce19000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efe7ce19000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffe24cb9cf0, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffe24cb9cf0, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 5602] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7cdda000 [pid 5602] mmap(0x7efe7cde2000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7efe7cde2000 [pid 5602] mmap(0x7efe7cdfe000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7efe7cdfe000 [pid 5602] mmap(0x7efe7ce06000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7efe7ce06000 [pid 5602] mmap(0x7efe7ce08000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efe7ce08000 [pid 5602] close(3) = 0 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efe7cdd8000 [pid 5602] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 5602] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7cdce000 [pid 5602] mmap(0x7efe7cdd0000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7efe7cdd0000 [pid 5602] mmap(0x7efe7cdd3000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7efe7cdd3000 [pid 5602] mmap(0x7efe7cdd5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7efe7cdd5000 [pid 5602] mmap(0x7efe7cdd7000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efe7cdd7000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 5602] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efe7cd6c000 [pid 5602] mmap(0x7efe7cd6f000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efe7cd6f000 [pid 5602] mmap(0x7efe7cda6000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7efe7cda6000 [pid 5602] mmap(0x7efe7cdcc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7efe7cdcc000 [pid 5602] close(3) = 0 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efe7cd6a000 [pid 5602] arch_prctl(ARCH_SET_FS, 0x7efe7cd6ac80) = 0 [pid 5602] set_tid_address(0x7efe7cd6af50) = 5602 [pid 5602] set_robust_list(0x7efe7cd6af60, 24) = 0 [pid 5602] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5602] mprotect(0x7efe7d000000, 16384, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7cdcc000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7cdd5000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7ce06000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7ce17000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7ce31000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7ce20000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7d0d1000, 12288, PROT_READ) = 0 [pid 5602] mprotect(0x5618e8d5a000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efe7d112000, 8192, PROT_READ) = 0 [pid 5602] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5602] statfs("/sys/fs/selinux", 0x7ffe24cbab30) = -1 ENOENT (No such file or directory) [pid 5602] statfs("/selinux", 0x7ffe24cbab30) = -1 ENOENT (No such file or directory) [pid 5602] getrandom("\xc8\x10\xc3\x35\xe5\x03\x3d\x37", 8, GRND_NONBLOCK) = 8 [pid 5602] brk(NULL) = 0x5619154df000 [pid 5602] brk(0x561915500000) = 0x561915500000 [pid 5602] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 [pid 5602] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt_misc\nnodev"..., 1024) = 772 [pid 5602] read(3, "", 1024) = 0 [pid 5602] close(3) = 0 [pid 5602] access("/etc/selinux/config", F_OK) = 0 [pid 5602] getpid() = 5602 [pid 5602] rt_sigaction(SIGCHLD, {sa_handler=0x7efe7d056287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7efe7ce72180}, NULL, 8) = 0 [pid 5602] getppid() = 5599 [pid 5602] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 5602] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5602] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5602] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5602] rt_sigaction(SIGINT, {sa_handler=0x7efe7d056287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7efe7ce72180}, NULL, 8) = 0 [pid 5602] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5602] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5602] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffe24cba688, 0) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [pid 5602] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x5619154dfd40 /* 10 vars */) = 0 [pid 5602] brk(NULL) = 0x565327570000 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efda8113000 [pid 5602] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffffc6ad900, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffffc6ad900, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 5602] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda8051000 [pid 5602] mmap(0x7efda8061000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7efda8061000 [pid 5602] mmap(0x7efda80e7000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7efda80e7000 [pid 5602] mmap(0x7efda810f000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7efda810f000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5602] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 5602] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5602] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e71000 [pid 5602] mmap(0x7efda7e99000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7efda7e99000 [pid 5602] mmap(0x7efda7fe7000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7efda7fe7000 [pid 5602] mmap(0x7efda803e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7efda803e000 [pid 5602] mmap(0x7efda8044000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efda8044000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 5602] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e60000 [pid 5602] mmap(0x7efda7e63000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efda7e63000 [pid 5602] mmap(0x7efda7e6b000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7efda7e6b000 [pid 5602] mmap(0x7efda7e6f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7efda7e6f000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 5602] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e59000 [pid 5602] mmap(0x7efda7e5b000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7efda7e5b000 [pid 5602] mmap(0x7efda7e5d000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7efda7e5d000 [pid 5602] mmap(0x7efda7e5e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7efda7e5e000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 5602] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e48000 [pid 5602] mmap(0x7efda7e4b000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efda7e4b000 [pid 5602] mmap(0x7efda7e53000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7efda7e53000 [pid 5602] mmap(0x7efda7e55000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7efda7e55000 [pid 5602] mmap(0x7efda7e57000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efda7e57000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffffc6ad860, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffffc6ad860, 0) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 5602] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e18000 [pid 5602] mmap(0x7efda7e20000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7efda7e20000 [pid 5602] mmap(0x7efda7e3c000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7efda7e3c000 [pid 5602] mmap(0x7efda7e44000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7efda7e44000 [pid 5602] mmap(0x7efda7e46000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efda7e46000 [pid 5602] close(3) = 0 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efda7e16000 [pid 5602] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 5602] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7e0c000 [pid 5602] mmap(0x7efda7e0e000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7efda7e0e000 [pid 5602] mmap(0x7efda7e11000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7efda7e11000 [pid 5602] mmap(0x7efda7e13000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7efda7e13000 [pid 5602] mmap(0x7efda7e15000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efda7e15000 [pid 5602] close(3) = 0 [pid 5602] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5602] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 5602] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 5602] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efda7daa000 [pid 5602] mmap(0x7efda7dad000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7efda7dad000 [pid 5602] mmap(0x7efda7de4000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7efda7de4000 [pid 5602] mmap(0x7efda7e0a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7efda7e0a000 [pid 5602] close(3) = 0 [pid 5602] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efda7da8000 [pid 5602] arch_prctl(ARCH_SET_FS, 0x7efda7da8c80) = 0 [pid 5602] set_tid_address(0x7efda7da8f50) = 5602 [pid 5602] set_robust_list(0x7efda7da8f60, 24) = 0 [pid 5602] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5602] mprotect(0x7efda803e000, 16384, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e0a000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e13000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e44000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e55000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e6f000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda7e5e000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda810f000, 12288, PROT_READ) = 0 [pid 5602] mprotect(0x5652ee0ea000, 4096, PROT_READ) = 0 [pid 5602] mprotect(0x7efda8150000, 8192, PROT_READ) = 0 [pid 5602] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5602] statfs("/sys/fs/selinux", 0x7ffffc6ae6a0) = -1 ENOENT (No such file or directory) [pid 5602] statfs("/selinux", 0x7ffffc6ae6a0) = -1 ENOENT (No such file or directory) [pid 5602] getrandom("\xfe\x60\xf4\x88\x89\x3c\x6b\x65", 8, GRND_NONBLOCK) = 8 [pid 5602] brk(NULL) = 0x565327570000 [pid 5602] brk(0x565327591000) = 0x565327591000 [pid 5602] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5602] fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 [pid 5602] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tdevtmpfs\nnodev\tbinfmt_misc\nnodev"..., 1024) = 772 [pid 5602] read(3, "", 1024) = 0 [pid 5602] close(3) = 0 [pid 5602] access("/etc/selinux/config", F_OK) = 0 [pid 5602] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 5602] lseek(3, 0, SEEK_END) = 128000000 [pid 5602] lseek(3, 0, SEEK_SET) = 0 [pid 5602] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 5602] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 5602] lseek(3, 4086, SEEK_SET) = 4086 [pid 5602] write(3, "SWAPSPACE2", 10) = 10 [pid 5602] fsync(3) = 0 [pid 5602] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 5602] exit_group(0) = ? Setting up swapspace version 1, size = 127995904 bytes [pid 5602] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f9113c53860}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f9113c53860}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5602, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 getrandom("\x4d\x7b\xcf\xca\x25\x62\xd9\x10", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.zWLwfz", 0700) = 0 chmod("./syzkaller.zWLwfz", 0777) = 0 chdir("./syzkaller.zWLwfz") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5604 attached , child_tidptr=0x55558daac6d0) = 5604 [pid 5604] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5599] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5599] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5604] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 5604] dup2(4, 202) = 202 [pid 5604] close(4) = 0 [ 103.259604][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 5604] write(202, "\xff\x00", 2) = 2 [pid 5604] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5604] rt_sigaction(SIGRT_1, {sa_handler=0x7f9113c5f930, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9113c53860}, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5604] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91133f4000 [pid 5604] mprotect(0x7f91133f5000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9113bf4990, parent_tid=0x7f9113bf4990, exit_signal=0, stack=0x7f91133f4000, stack_size=0x8002c0, tls=0x7f9113bf46c0}ci2-upstream-fs/strace-static-x86_64: Process 5606 attached [pid 5606] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5604] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5606] <... rseq resumed>) = 0 [pid 5606] set_robust_list(0x7f9113bf49a0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] ioctl(3, HCIDEVUP, 0 [pid 5606] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5606] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5606] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5606] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [ 103.377559][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.381829][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.396522][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.423733][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5604] <... ioctl resumed>) = -1 EALREADY (Operation already in progress) [pid 5606] read(202 [pid 5604] ioctl(3, HCISETSCAN, 0x7ffebc4822d8 [pid 5606] <... read resumed>, "\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5606] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[RT_1], NULL, 8) = 0 [pid 5606] madvise(0x7f91133f4000, 8372224, MADV_DONTNEED) = 0 [pid 5606] exit(0) = ? [pid 5606] +++ exited with 0 +++ [pid 5604] <... ioctl resumed>) = 0 [pid 5604] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3) = 13 [pid 5604] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3) = 14 [pid 5604] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14 [pid 5604] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5604] close(3) = 0 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] getppid() = 0 [pid 5604] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5604] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5604] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5604] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5604] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5604] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5604] unshare(CLONE_NEWNS) = 0 [pid 5604] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5604] unshare(CLONE_NEWIPC) = 0 [pid 5604] unshare(CLONE_NEWCGROUP) = 0 [pid 5604] unshare(CLONE_NEWUTS) = 0 [pid 5604] unshare(CLONE_SYSVSEM) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "16777216", 8) = 8 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "536870912", 9) = 9 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1024", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "8192", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1024", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1024", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5604] close(3) = 0 [ 103.437622][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5604] getpid() = 1 [pid 5604] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5641] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 3 [pid 5641] <... set_robust_list resumed>) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] chdir("./0" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] <... chdir resumed>) = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5641] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5641] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5641] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5641] write(1, "executing program\n", 18) = 18 [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [ 109.665895][ T4899] Bluetooth: hci0: command tx timeout [pid 5641] munmap(0x7f910aff4000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] close(3) = 0 [ 109.801485][ T5641] loop0: detected capacity change from 0 to 32768 [pid 5641] close(4) = 0 [pid 5641] mkdir("./file1", 0777) = 0 [pid 5641] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5641] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] chdir("./file1") = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5641] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5641] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5641] close(3) = 0 [pid 5641] close(4) = -1 EBADF (Bad file descriptor) [pid 5641] close(5) = -1 EBADF (Bad file descriptor) [pid 5641] close(6) = -1 EBADF (Bad file descriptor) [pid 5641] close(7) = -1 EBADF (Bad file descriptor) [pid 5641] close(8) = -1 EBADF (Bad file descriptor) [pid 5641] close(9) = -1 EBADF (Bad file descriptor) [pid 5641] close(10) = -1 EBADF (Bad file descriptor) [pid 5641] close(11) = -1 EBADF (Bad file descriptor) [pid 5641] close(12) = -1 EBADF (Bad file descriptor) [pid 5641] close(13) = -1 EBADF (Bad file descriptor) [pid 5641] close(14) = -1 EBADF (Bad file descriptor) [pid 5641] close(15) = -1 EBADF (Bad file descriptor) [pid 5641] close(16) = -1 EBADF (Bad file descriptor) [pid 5641] close(17) = -1 EBADF (Bad file descriptor) [pid 5641] close(18) = -1 EBADF (Bad file descriptor) [pid 5641] close(19) = -1 EBADF (Bad file descriptor) [pid 5641] close(20) = -1 EBADF (Bad file descriptor) [pid 5641] close(21) = -1 EBADF (Bad file descriptor) [pid 5641] close(22) = -1 EBADF (Bad file descriptor) [pid 5641] close(23) = -1 EBADF (Bad file descriptor) [pid 5641] close(24) = -1 EBADF (Bad file descriptor) [pid 5641] close(25) = -1 EBADF (Bad file descriptor) [pid 5641] close(26) = -1 EBADF (Bad file descriptor) [pid 5641] close(27) = -1 EBADF (Bad file descriptor) [pid 5641] close(28) = -1 EBADF (Bad file descriptor) [pid 5641] close(29) = -1 EBADF (Bad file descriptor) [pid 5641] exit_group(0) = ? [ 110.032423][ T5641] ialloc: diAlloc returned -17! [pid 5641] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- [pid 5604] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./0/file1") = 0 [pid 5604] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./0/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./0") = 0 [pid 5604] mkdir("./1", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5642 attached , child_tidptr=0x55558daac6d0) = 4 [pid 5642] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5642] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5642] chdir("./1") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] write(1, "executing program\n", 18) = 18 executing program [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5642] munmap(0x7f910aff4000, 138412032) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5642] close(3) = 0 [pid 5642] close(4) = 0 [pid 5642] mkdir("./file1", 0777) = 0 [pid 5642] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file1") = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [pid 5642] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 110.598677][ T5642] loop0: detected capacity change from 0 to 32768 [pid 5642] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5642] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5642] close(3) = 0 [pid 5642] close(4) = -1 EBADF (Bad file descriptor) [pid 5642] close(5) = -1 EBADF (Bad file descriptor) [pid 5642] close(6) = -1 EBADF (Bad file descriptor) [pid 5642] close(7) = -1 EBADF (Bad file descriptor) [pid 5642] close(8) = -1 EBADF (Bad file descriptor) [pid 5642] close(9) = -1 EBADF (Bad file descriptor) [pid 5642] close(10) = -1 EBADF (Bad file descriptor) [pid 5642] close(11) = -1 EBADF (Bad file descriptor) [pid 5642] close(12) = -1 EBADF (Bad file descriptor) [pid 5642] close(13) = -1 EBADF (Bad file descriptor) [pid 5642] close(14) = -1 EBADF (Bad file descriptor) [pid 5642] close(15) = -1 EBADF (Bad file descriptor) [pid 5642] close(16) = -1 EBADF (Bad file descriptor) [pid 5642] close(17) = -1 EBADF (Bad file descriptor) [pid 5642] close(18) = -1 EBADF (Bad file descriptor) [pid 5642] close(19) = -1 EBADF (Bad file descriptor) [pid 5642] close(20) = -1 EBADF (Bad file descriptor) [pid 5642] close(21) = -1 EBADF (Bad file descriptor) [pid 5642] close(22) = -1 EBADF (Bad file descriptor) [pid 5642] close(23) = -1 EBADF (Bad file descriptor) [pid 5642] close(24) = -1 EBADF (Bad file descriptor) [ 110.658462][ T5642] ialloc: diAlloc returned -17! [pid 5642] close(25) = -1 EBADF (Bad file descriptor) [pid 5642] close(26) = -1 EBADF (Bad file descriptor) [pid 5642] close(27) = -1 EBADF (Bad file descriptor) [pid 5642] close(28) = -1 EBADF (Bad file descriptor) [pid 5642] close(29) = -1 EBADF (Bad file descriptor) [pid 5642] exit_group(0) = ? [pid 5642] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./1/file1") = 0 [pid 5604] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./1/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./1") = 0 [pid 5604] mkdir("./2", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5643 attached [pid 5643] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] chdir("./2") = 0 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 5 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] <... prctl resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 [pid 5643] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] write(1, "executing program\n", 18) = 18 executing program [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5643] munmap(0x7f910aff4000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5643] close(3) = 0 [pid 5643] close(4) = 0 [pid 5643] mkdir("./file1", 0777) = 0 [pid 5643] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5643] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file1") = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5643] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 111.256975][ T5643] loop0: detected capacity change from 0 to 32768 [pid 5643] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5643] close(3) = 0 [pid 5643] close(4) = -1 EBADF (Bad file descriptor) [pid 5643] close(5) = -1 EBADF (Bad file descriptor) [pid 5643] close(6) = -1 EBADF (Bad file descriptor) [pid 5643] close(7) = -1 EBADF (Bad file descriptor) [pid 5643] close(8) = -1 EBADF (Bad file descriptor) [pid 5643] close(9) = -1 EBADF (Bad file descriptor) [pid 5643] close(10) = -1 EBADF (Bad file descriptor) [pid 5643] close(11) = -1 EBADF (Bad file descriptor) [pid 5643] close(12) = -1 EBADF (Bad file descriptor) [pid 5643] close(13) = -1 EBADF (Bad file descriptor) [pid 5643] close(14) = -1 EBADF (Bad file descriptor) [pid 5643] close(15) = -1 EBADF (Bad file descriptor) [pid 5643] close(16) = -1 EBADF (Bad file descriptor) [pid 5643] close(17) = -1 EBADF (Bad file descriptor) [pid 5643] close(18) = -1 EBADF (Bad file descriptor) [pid 5643] close(19) = -1 EBADF (Bad file descriptor) [pid 5643] close(20) = -1 EBADF (Bad file descriptor) [pid 5643] close(21) = -1 EBADF (Bad file descriptor) [pid 5643] close(22) = -1 EBADF (Bad file descriptor) [pid 5643] close(23) = -1 EBADF (Bad file descriptor) [pid 5643] close(24) = -1 EBADF (Bad file descriptor) [pid 5643] close(25) = -1 EBADF (Bad file descriptor) [pid 5643] close(26) = -1 EBADF (Bad file descriptor) [pid 5643] close(27) = -1 EBADF (Bad file descriptor) [pid 5643] close(28) = -1 EBADF (Bad file descriptor) [pid 5643] close(29) = -1 EBADF (Bad file descriptor) [pid 5643] exit_group(0) = ? [pid 5643] +++ exited with 0 +++ [ 111.310750][ T5643] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5604] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./2/file1") = 0 [pid 5604] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./2/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./2") = 0 [pid 5604] mkdir("./3", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5644 attached , child_tidptr=0x55558daac6d0) = 6 [pid 5644] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] chdir("./3") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] write(1, "executing program\n", 18) = 18 executing program [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [ 111.745064][ T4899] Bluetooth: hci0: command tx timeout [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5644] munmap(0x7f910aff4000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5644] close(3) = 0 [pid 5644] close(4) = 0 [pid 5644] mkdir("./file1", 0777) = 0 [pid 5644] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./file1") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [ 111.838345][ T5644] loop0: detected capacity change from 0 to 32768 [pid 5644] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5644] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5644] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5644] close(3) = 0 [pid 5644] close(4) = -1 EBADF (Bad file descriptor) [pid 5644] close(5) = -1 EBADF (Bad file descriptor) [pid 5644] close(6) = -1 EBADF (Bad file descriptor) [pid 5644] close(7) = -1 EBADF (Bad file descriptor) [pid 5644] close(8) = -1 EBADF (Bad file descriptor) [pid 5644] close(9) = -1 EBADF (Bad file descriptor) [pid 5644] close(10) = -1 EBADF (Bad file descriptor) [pid 5644] close(11) = -1 EBADF (Bad file descriptor) [pid 5644] close(12) = -1 EBADF (Bad file descriptor) [pid 5644] close(13) = -1 EBADF (Bad file descriptor) [pid 5644] close(14) = -1 EBADF (Bad file descriptor) [ 111.911304][ T5644] ialloc: diAlloc returned -17! [pid 5644] close(15) = -1 EBADF (Bad file descriptor) [pid 5644] close(16) = -1 EBADF (Bad file descriptor) [pid 5644] close(17) = -1 EBADF (Bad file descriptor) [pid 5644] close(18) = -1 EBADF (Bad file descriptor) [pid 5644] close(19) = -1 EBADF (Bad file descriptor) [pid 5644] close(20) = -1 EBADF (Bad file descriptor) [pid 5644] close(21) = -1 EBADF (Bad file descriptor) [pid 5644] close(22) = -1 EBADF (Bad file descriptor) [pid 5644] close(23) = -1 EBADF (Bad file descriptor) [pid 5644] close(24) = -1 EBADF (Bad file descriptor) [pid 5644] close(25) = -1 EBADF (Bad file descriptor) [pid 5644] close(26) = -1 EBADF (Bad file descriptor) [pid 5644] close(27) = -1 EBADF (Bad file descriptor) [pid 5644] close(28) = -1 EBADF (Bad file descriptor) [pid 5644] close(29) = -1 EBADF (Bad file descriptor) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5604] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./3/file1") = 0 [pid 5604] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./3/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./3") = 0 [pid 5604] mkdir("./4", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5645 attached , child_tidptr=0x55558daac6d0) = 7 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] chdir("./4") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5645] write(1, "executing program\n", 18) = 18 executing program [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5645] munmap(0x7f910aff4000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5645] close(3) = 0 [pid 5645] close(4) = 0 [pid 5645] mkdir("./file1", 0777) = 0 [pid 5645] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5645] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5645] chdir("./file1") = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5645] ioctl(4, LOOP_CLR_FD) = 0 [pid 5645] close(4) = 0 [pid 5645] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 112.509084][ T5645] loop0: detected capacity change from 0 to 32768 [pid 5645] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5645] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5645] close(3) = 0 [pid 5645] close(4) = -1 EBADF (Bad file descriptor) [pid 5645] close(5) = -1 EBADF (Bad file descriptor) [pid 5645] close(6) = -1 EBADF (Bad file descriptor) [pid 5645] close(7) = -1 EBADF (Bad file descriptor) [pid 5645] close(8) = -1 EBADF (Bad file descriptor) [pid 5645] close(9) = -1 EBADF (Bad file descriptor) [pid 5645] close(10) = -1 EBADF (Bad file descriptor) [pid 5645] close(11) = -1 EBADF (Bad file descriptor) [pid 5645] close(12) = -1 EBADF (Bad file descriptor) [pid 5645] close(13) = -1 EBADF (Bad file descriptor) [pid 5645] close(14) = -1 EBADF (Bad file descriptor) [pid 5645] close(15) = -1 EBADF (Bad file descriptor) [pid 5645] close(16) = -1 EBADF (Bad file descriptor) [pid 5645] close(17) = -1 EBADF (Bad file descriptor) [pid 5645] close(18) = -1 EBADF (Bad file descriptor) [pid 5645] close(19) = -1 EBADF (Bad file descriptor) [pid 5645] close(20) = -1 EBADF (Bad file descriptor) [pid 5645] close(21) = -1 EBADF (Bad file descriptor) [pid 5645] close(22) = -1 EBADF (Bad file descriptor) [pid 5645] close(23) = -1 EBADF (Bad file descriptor) [pid 5645] close(24) = -1 EBADF (Bad file descriptor) [pid 5645] close(25) = -1 EBADF (Bad file descriptor) [pid 5645] close(26) = -1 EBADF (Bad file descriptor) [pid 5645] close(27) = -1 EBADF (Bad file descriptor) [pid 5645] close(28) = -1 EBADF (Bad file descriptor) [pid 5645] close(29) = -1 EBADF (Bad file descriptor) [pid 5645] exit_group(0) = ? [ 112.552315][ T5645] ialloc: diAlloc returned -17! [pid 5645] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5604] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./4/file1") = 0 [pid 5604] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./4/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./4") = 0 [pid 5604] mkdir("./5", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5646 attached , child_tidptr=0x55558daac6d0) = 8 [pid 5646] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] chdir("./5" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... chdir resumed>) = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] write(1, "executing program\n", 18) = 18 executing program [pid 5646] memfd_create("syzkaller", 0) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5646] munmap(0x7f910aff4000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5646] close(3) = 0 [pid 5646] close(4) = 0 [pid 5646] mkdir("./file1", 0777) = 0 [pid 5646] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file1") = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 113.076430][ T5646] loop0: detected capacity change from 0 to 32768 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5646] close(4) = 0 [pid 5646] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5646] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5646] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5646] close(3) = 0 [pid 5646] close(4) = -1 EBADF (Bad file descriptor) [pid 5646] close(5) = -1 EBADF (Bad file descriptor) [pid 5646] close(6) = -1 EBADF (Bad file descriptor) [pid 5646] close(7) = -1 EBADF (Bad file descriptor) [pid 5646] close(8) = -1 EBADF (Bad file descriptor) [pid 5646] close(9) = -1 EBADF (Bad file descriptor) [pid 5646] close(10) = -1 EBADF (Bad file descriptor) [pid 5646] close(11) = -1 EBADF (Bad file descriptor) [pid 5646] close(12) = -1 EBADF (Bad file descriptor) [pid 5646] close(13) = -1 EBADF (Bad file descriptor) [pid 5646] close(14) = -1 EBADF (Bad file descriptor) [pid 5646] close(15) = -1 EBADF (Bad file descriptor) [pid 5646] close(16) = -1 EBADF (Bad file descriptor) [pid 5646] close(17) = -1 EBADF (Bad file descriptor) [pid 5646] close(18) = -1 EBADF (Bad file descriptor) [pid 5646] close(19) = -1 EBADF (Bad file descriptor) [pid 5646] close(20) = -1 EBADF (Bad file descriptor) [pid 5646] close(21) = -1 EBADF (Bad file descriptor) [pid 5646] close(22) = -1 EBADF (Bad file descriptor) [pid 5646] close(23) = -1 EBADF (Bad file descriptor) [pid 5646] close(24) = -1 EBADF (Bad file descriptor) [pid 5646] close(25) = -1 EBADF (Bad file descriptor) [pid 5646] close(26) = -1 EBADF (Bad file descriptor) [pid 5646] close(27) = -1 EBADF (Bad file descriptor) [pid 5646] close(28) = -1 EBADF (Bad file descriptor) [pid 5646] close(29) = -1 EBADF (Bad file descriptor) [pid 5646] exit_group(0) = ? [pid 5646] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 113.161381][ T5646] ialloc: diAlloc returned -17! [pid 5604] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./5/file1") = 0 [pid 5604] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./5/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./5") = 0 [pid 5604] mkdir("./6", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 9 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] chdir("./6") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] write(1, "executing program\n", 18) = 18 executing program [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5647] munmap(0x7f910aff4000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file1", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file1") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [ 113.653767][ T5647] loop0: detected capacity change from 0 to 32768 [pid 5647] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5647] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5647] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5647] close(3) = 0 [pid 5647] close(4) = -1 EBADF (Bad file descriptor) [pid 5647] close(5) = -1 EBADF (Bad file descriptor) [pid 5647] close(6) = -1 EBADF (Bad file descriptor) [pid 5647] close(7) = -1 EBADF (Bad file descriptor) [pid 5647] close(8) = -1 EBADF (Bad file descriptor) [pid 5647] close(9) = -1 EBADF (Bad file descriptor) [pid 5647] close(10) = -1 EBADF (Bad file descriptor) [pid 5647] close(11) = -1 EBADF (Bad file descriptor) [pid 5647] close(12) = -1 EBADF (Bad file descriptor) [pid 5647] close(13) = -1 EBADF (Bad file descriptor) [pid 5647] close(14) = -1 EBADF (Bad file descriptor) [pid 5647] close(15) = -1 EBADF (Bad file descriptor) [pid 5647] close(16) = -1 EBADF (Bad file descriptor) [pid 5647] close(17) = -1 EBADF (Bad file descriptor) [pid 5647] close(18) = -1 EBADF (Bad file descriptor) [pid 5647] close(19) = -1 EBADF (Bad file descriptor) [pid 5647] close(20) = -1 EBADF (Bad file descriptor) [pid 5647] close(21) = -1 EBADF (Bad file descriptor) [pid 5647] close(22) = -1 EBADF (Bad file descriptor) [pid 5647] close(23) = -1 EBADF (Bad file descriptor) [pid 5647] close(24) = -1 EBADF (Bad file descriptor) [pid 5647] close(25) = -1 EBADF (Bad file descriptor) [pid 5647] close(26) = -1 EBADF (Bad file descriptor) [pid 5647] close(27) = -1 EBADF (Bad file descriptor) [pid 5647] close(28) = -1 EBADF (Bad file descriptor) [pid 5647] close(29) = -1 EBADF (Bad file descriptor) [pid 5647] exit_group(0) = ? [pid 5647] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [ 113.720893][ T5647] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./6/file1") = 0 [pid 5604] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./6/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./6") = 0 [pid 5604] mkdir("./7", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5648 attached , child_tidptr=0x55558daac6d0) = 10 [pid 5648] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] <... set_robust_list resumed>) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] chdir("./7") = 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5648] write(1, "executing program\n", 18) = 18 [pid 5648] memfd_create("syzkaller", 0) = 3 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5648] munmap(0x7f910aff4000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] close(3) = 0 [pid 5648] close(4) = 0 [pid 5648] mkdir("./file1", 0777) = 0 [pid 5648] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5648] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5648] chdir("./file1") = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [ 114.234318][ T5648] loop0: detected capacity change from 0 to 32768 [pid 5648] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5648] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5648] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5648] close(3) = 0 [pid 5648] close(4) = -1 EBADF (Bad file descriptor) [pid 5648] close(5) = -1 EBADF (Bad file descriptor) [pid 5648] close(6) = -1 EBADF (Bad file descriptor) [pid 5648] close(7) = -1 EBADF (Bad file descriptor) [pid 5648] close(8) = -1 EBADF (Bad file descriptor) [pid 5648] close(9) = -1 EBADF (Bad file descriptor) [pid 5648] close(10) = -1 EBADF (Bad file descriptor) [pid 5648] close(11) = -1 EBADF (Bad file descriptor) [pid 5648] close(12) = -1 EBADF (Bad file descriptor) [pid 5648] close(13) = -1 EBADF (Bad file descriptor) [pid 5648] close(14) = -1 EBADF (Bad file descriptor) [pid 5648] close(15) = -1 EBADF (Bad file descriptor) [pid 5648] close(16) = -1 EBADF (Bad file descriptor) [ 114.300708][ T5648] ialloc: diAlloc returned -17! [pid 5648] close(17) = -1 EBADF (Bad file descriptor) [pid 5648] close(18) = -1 EBADF (Bad file descriptor) [pid 5648] close(19) = -1 EBADF (Bad file descriptor) [pid 5648] close(20) = -1 EBADF (Bad file descriptor) [pid 5648] close(21) = -1 EBADF (Bad file descriptor) [pid 5648] close(22) = -1 EBADF (Bad file descriptor) [pid 5648] close(23) = -1 EBADF (Bad file descriptor) [pid 5648] close(24) = -1 EBADF (Bad file descriptor) [pid 5648] close(25) = -1 EBADF (Bad file descriptor) [pid 5648] close(26) = -1 EBADF (Bad file descriptor) [pid 5648] close(27) = -1 EBADF (Bad file descriptor) [pid 5648] close(28) = -1 EBADF (Bad file descriptor) [pid 5648] close(29) = -1 EBADF (Bad file descriptor) [pid 5648] exit_group(0) = ? [pid 5648] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./7/file1") = 0 [pid 5604] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./7/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./7") = 0 [pid 5604] mkdir("./8", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5649 attached , child_tidptr=0x55558daac6d0) = 11 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5649] chdir("./8") = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5649] write(1, "executing program\n", 18) = 18 [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5649] munmap(0x7f910aff4000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5649] close(3) = 0 [pid 5649] close(4) = 0 [pid 5649] mkdir("./file1", 0777) = 0 [pid 5649] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5649] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5649] chdir("./file1") = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5649] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 114.866968][ T5649] loop0: detected capacity change from 0 to 32768 [pid 5649] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5649] close(3) = 0 [pid 5649] close(4) = -1 EBADF (Bad file descriptor) [pid 5649] close(5) = -1 EBADF (Bad file descriptor) [pid 5649] close(6) = -1 EBADF (Bad file descriptor) [pid 5649] close(7) = -1 EBADF (Bad file descriptor) [pid 5649] close(8) = -1 EBADF (Bad file descriptor) [pid 5649] close(9) = -1 EBADF (Bad file descriptor) [pid 5649] close(10) = -1 EBADF (Bad file descriptor) [pid 5649] close(11) = -1 EBADF (Bad file descriptor) [pid 5649] close(12) = -1 EBADF (Bad file descriptor) [pid 5649] close(13) = -1 EBADF (Bad file descriptor) [pid 5649] close(14) = -1 EBADF (Bad file descriptor) [pid 5649] close(15) = -1 EBADF (Bad file descriptor) [pid 5649] close(16) = -1 EBADF (Bad file descriptor) [pid 5649] close(17) = -1 EBADF (Bad file descriptor) [pid 5649] close(18) = -1 EBADF (Bad file descriptor) [pid 5649] close(19) = -1 EBADF (Bad file descriptor) [pid 5649] close(20) = -1 EBADF (Bad file descriptor) [pid 5649] close(21) = -1 EBADF (Bad file descriptor) [pid 5649] close(22) = -1 EBADF (Bad file descriptor) [pid 5649] close(23) = -1 EBADF (Bad file descriptor) [pid 5649] close(24) = -1 EBADF (Bad file descriptor) [pid 5649] close(25) = -1 EBADF (Bad file descriptor) [pid 5649] close(26) = -1 EBADF (Bad file descriptor) [pid 5649] close(27) = -1 EBADF (Bad file descriptor) [pid 5649] close(28) = -1 EBADF (Bad file descriptor) [ 114.910949][ T5649] ialloc: diAlloc returned -17! [pid 5649] close(29) = -1 EBADF (Bad file descriptor) [pid 5649] exit_group(0) = ? [pid 5649] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./8/file1") = 0 [pid 5604] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./8/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./8") = 0 [pid 5604] mkdir("./9", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5650 attached , child_tidptr=0x55558daac6d0) = 12 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] chdir("./9") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5650] write(1, "executing program\n", 18) = 18 [pid 5650] memfd_create("syzkaller", 0) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5650] munmap(0x7f910aff4000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5650] close(3) = 0 [pid 5650] close(4) = 0 [pid 5650] mkdir("./file1", 0777) = 0 [pid 5650] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file1") = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4) = 0 [pid 5650] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5650] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5650] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5650] close(3) = 0 [ 115.483709][ T5650] loop0: detected capacity change from 0 to 32768 [pid 5650] close(4) = -1 EBADF (Bad file descriptor) [pid 5650] close(5) = -1 EBADF (Bad file descriptor) [pid 5650] close(6) = -1 EBADF (Bad file descriptor) [pid 5650] close(7) = -1 EBADF (Bad file descriptor) [pid 5650] close(8) = -1 EBADF (Bad file descriptor) [pid 5650] close(9) = -1 EBADF (Bad file descriptor) [pid 5650] close(10) = -1 EBADF (Bad file descriptor) [pid 5650] close(11) = -1 EBADF (Bad file descriptor) [pid 5650] close(12) = -1 EBADF (Bad file descriptor) [pid 5650] close(13) = -1 EBADF (Bad file descriptor) [pid 5650] close(14) = -1 EBADF (Bad file descriptor) [pid 5650] close(15) = -1 EBADF (Bad file descriptor) [pid 5650] close(16) = -1 EBADF (Bad file descriptor) [pid 5650] close(17) = -1 EBADF (Bad file descriptor) [pid 5650] close(18) = -1 EBADF (Bad file descriptor) [pid 5650] close(19) = -1 EBADF (Bad file descriptor) [pid 5650] close(20) = -1 EBADF (Bad file descriptor) [pid 5650] close(21) = -1 EBADF (Bad file descriptor) [pid 5650] close(22) = -1 EBADF (Bad file descriptor) [pid 5650] close(23) = -1 EBADF (Bad file descriptor) [pid 5650] close(24) = -1 EBADF (Bad file descriptor) [pid 5650] close(25) = -1 EBADF (Bad file descriptor) [pid 5650] close(26) = -1 EBADF (Bad file descriptor) [pid 5650] close(27) = -1 EBADF (Bad file descriptor) [pid 5650] close(28) = -1 EBADF (Bad file descriptor) [pid 5650] close(29) = -1 EBADF (Bad file descriptor) [pid 5650] exit_group(0) = ? [pid 5650] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [ 115.528550][ T5650] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./9/file1") = 0 [pid 5604] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./9/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./9") = 0 [pid 5604] mkdir("./10", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5651 attached [pid 5651] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 13 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] chdir("./10") = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5651] setpgid(0, 0) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5651] write(1, "executing program\n", 18) = 18 executing program [pid 5651] memfd_create("syzkaller", 0) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5651] munmap(0x7f910aff4000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5651] close(3) = 0 [pid 5651] close(4) = 0 [pid 5651] mkdir("./file1", 0777) = 0 [pid 5651] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5651] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file1") = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 116.027831][ T5651] loop0: detected capacity change from 0 to 32768 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5651] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5651] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5651] close(3) = 0 [pid 5651] close(4) = -1 EBADF (Bad file descriptor) [pid 5651] close(5) = -1 EBADF (Bad file descriptor) [pid 5651] close(6) = -1 EBADF (Bad file descriptor) [pid 5651] close(7) = -1 EBADF (Bad file descriptor) [pid 5651] close(8) = -1 EBADF (Bad file descriptor) [pid 5651] close(9) = -1 EBADF (Bad file descriptor) [pid 5651] close(10) = -1 EBADF (Bad file descriptor) [pid 5651] close(11) = -1 EBADF (Bad file descriptor) [pid 5651] close(12) = -1 EBADF (Bad file descriptor) [pid 5651] close(13) = -1 EBADF (Bad file descriptor) [pid 5651] close(14) = -1 EBADF (Bad file descriptor) [pid 5651] close(15) = -1 EBADF (Bad file descriptor) [pid 5651] close(16) = -1 EBADF (Bad file descriptor) [pid 5651] close(17) = -1 EBADF (Bad file descriptor) [pid 5651] close(18) = -1 EBADF (Bad file descriptor) [pid 5651] close(19) = -1 EBADF (Bad file descriptor) [pid 5651] close(20) = -1 EBADF (Bad file descriptor) [pid 5651] close(21) = -1 EBADF (Bad file descriptor) [pid 5651] close(22) = -1 EBADF (Bad file descriptor) [pid 5651] close(23) = -1 EBADF (Bad file descriptor) [pid 5651] close(24) = -1 EBADF (Bad file descriptor) [pid 5651] close(25) = -1 EBADF (Bad file descriptor) [pid 5651] close(26) = -1 EBADF (Bad file descriptor) [pid 5651] close(27) = -1 EBADF (Bad file descriptor) [pid 5651] close(28) = -1 EBADF (Bad file descriptor) [pid 5651] close(29) = -1 EBADF (Bad file descriptor) [pid 5651] exit_group(0) = ? [ 116.084875][ T5651] ialloc: diAlloc returned -17! [pid 5651] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./10/file1") = 0 [pid 5604] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./10/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./10") = 0 [pid 5604] mkdir("./11", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5652 attached , child_tidptr=0x55558daac6d0) = 14 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5652] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] <... set_robust_list resumed>) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] chdir("./11") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] write(1, "executing program\n", 18) = 18 executing program [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5652] munmap(0x7f910aff4000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5652] close(3) = 0 [pid 5652] close(4) = 0 [pid 5652] mkdir("./file1", 0777) = 0 [pid 5652] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5652] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] chdir("./file1") = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5652] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5652] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5652] close(3) = 0 [pid 5652] close(4) = -1 EBADF (Bad file descriptor) [pid 5652] close(5) = -1 EBADF (Bad file descriptor) [pid 5652] close(6) = -1 EBADF (Bad file descriptor) [pid 5652] close(7) = -1 EBADF (Bad file descriptor) [pid 5652] close(8) = -1 EBADF (Bad file descriptor) [pid 5652] close(9) = -1 EBADF (Bad file descriptor) [pid 5652] close(10) = -1 EBADF (Bad file descriptor) [ 116.602767][ T5652] loop0: detected capacity change from 0 to 32768 [pid 5652] close(11) = -1 EBADF (Bad file descriptor) [pid 5652] close(12) = -1 EBADF (Bad file descriptor) [pid 5652] close(13) = -1 EBADF (Bad file descriptor) [pid 5652] close(14) = -1 EBADF (Bad file descriptor) [pid 5652] close(15) = -1 EBADF (Bad file descriptor) [pid 5652] close(16) = -1 EBADF (Bad file descriptor) [pid 5652] close(17) = -1 EBADF (Bad file descriptor) [pid 5652] close(18) = -1 EBADF (Bad file descriptor) [pid 5652] close(19) = -1 EBADF (Bad file descriptor) [pid 5652] close(20) = -1 EBADF (Bad file descriptor) [pid 5652] close(21) = -1 EBADF (Bad file descriptor) [pid 5652] close(22) = -1 EBADF (Bad file descriptor) [pid 5652] close(23) = -1 EBADF (Bad file descriptor) [pid 5652] close(24) = -1 EBADF (Bad file descriptor) [pid 5652] close(25) = -1 EBADF (Bad file descriptor) [pid 5652] close(26) = -1 EBADF (Bad file descriptor) [pid 5652] close(27) = -1 EBADF (Bad file descriptor) [pid 5652] close(28) = -1 EBADF (Bad file descriptor) [pid 5652] close(29) = -1 EBADF (Bad file descriptor) [pid 5652] exit_group(0) = ? [ 116.649926][ T5652] ialloc: diAlloc returned -17! [pid 5652] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./11/file1") = 0 [pid 5604] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./11/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./11") = 0 [pid 5604] mkdir("./12", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5653 attached [pid 5653] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 15 [pid 5653] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] chdir("./12") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5653] write(1, "executing program\n", 18) = 18 [pid 5653] memfd_create("syzkaller", 0) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5653] munmap(0x7f910aff4000, 138412032) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5653] close(3) = 0 [pid 5653] close(4) = 0 [pid 5653] mkdir("./file1", 0777) = 0 [pid 5653] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5653] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5653] chdir("./file1") = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5653] ioctl(4, LOOP_CLR_FD) = 0 [pid 5653] close(4) = 0 [pid 5653] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 117.177755][ T5653] loop0: detected capacity change from 0 to 32768 [pid 5653] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5653] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5653] close(3) = 0 [pid 5653] close(4) = -1 EBADF (Bad file descriptor) [pid 5653] close(5) = -1 EBADF (Bad file descriptor) [pid 5653] close(6) = -1 EBADF (Bad file descriptor) [pid 5653] close(7) = -1 EBADF (Bad file descriptor) [pid 5653] close(8) = -1 EBADF (Bad file descriptor) [pid 5653] close(9) = -1 EBADF (Bad file descriptor) [pid 5653] close(10) = -1 EBADF (Bad file descriptor) [pid 5653] close(11) = -1 EBADF (Bad file descriptor) [pid 5653] close(12) = -1 EBADF (Bad file descriptor) [pid 5653] close(13) = -1 EBADF (Bad file descriptor) [pid 5653] close(14) = -1 EBADF (Bad file descriptor) [pid 5653] close(15) = -1 EBADF (Bad file descriptor) [pid 5653] close(16) = -1 EBADF (Bad file descriptor) [pid 5653] close(17) = -1 EBADF (Bad file descriptor) [pid 5653] close(18) = -1 EBADF (Bad file descriptor) [pid 5653] close(19) = -1 EBADF (Bad file descriptor) [pid 5653] close(20) = -1 EBADF (Bad file descriptor) [pid 5653] close(21) = -1 EBADF (Bad file descriptor) [pid 5653] close(22) = -1 EBADF (Bad file descriptor) [pid 5653] close(23) = -1 EBADF (Bad file descriptor) [pid 5653] close(24) = -1 EBADF (Bad file descriptor) [pid 5653] close(25) = -1 EBADF (Bad file descriptor) [pid 5653] close(26) = -1 EBADF (Bad file descriptor) [pid 5653] close(27) = -1 EBADF (Bad file descriptor) [pid 5653] close(28) = -1 EBADF (Bad file descriptor) [pid 5653] close(29) = -1 EBADF (Bad file descriptor) [pid 5653] exit_group(0) = ? [pid 5653] +++ exited with 0 +++ [ 117.220759][ T5653] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./12/file1") = 0 [pid 5604] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./12/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./12") = 0 [pid 5604] mkdir("./13", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5654 attached , child_tidptr=0x55558daac6d0) = 16 [pid 5654] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5654] <... set_robust_list resumed>) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] chdir("./13") = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5654] write(3, "1000", 4) = 4 [pid 5654] close(3) = 0 [pid 5654] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5654] write(1, "executing program\n", 18) = 18 executing program [pid 5654] memfd_create("syzkaller", 0) = 3 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5654] munmap(0x7f910aff4000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5654] close(3) = 0 [pid 5654] close(4) = 0 [pid 5654] mkdir("./file1", 0777) = 0 [pid 5654] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5654] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5654] chdir("./file1") = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5654] ioctl(4, LOOP_CLR_FD) = 0 [pid 5654] close(4) = 0 [ 117.762009][ T5654] loop0: detected capacity change from 0 to 32768 [pid 5654] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5654] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5654] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5654] close(3) = 0 [pid 5654] close(4) = -1 EBADF (Bad file descriptor) [pid 5654] close(5) = -1 EBADF (Bad file descriptor) [pid 5654] close(6) = -1 EBADF (Bad file descriptor) [pid 5654] close(7) = -1 EBADF (Bad file descriptor) [pid 5654] close(8) = -1 EBADF (Bad file descriptor) [pid 5654] close(9) = -1 EBADF (Bad file descriptor) [pid 5654] close(10) = -1 EBADF (Bad file descriptor) [pid 5654] close(11) = -1 EBADF (Bad file descriptor) [pid 5654] close(12) = -1 EBADF (Bad file descriptor) [pid 5654] close(13) = -1 EBADF (Bad file descriptor) [pid 5654] close(14) = -1 EBADF (Bad file descriptor) [pid 5654] close(15) = -1 EBADF (Bad file descriptor) [pid 5654] close(16) = -1 EBADF (Bad file descriptor) [pid 5654] close(17) = -1 EBADF (Bad file descriptor) [pid 5654] close(18) = -1 EBADF (Bad file descriptor) [pid 5654] close(19) = -1 EBADF (Bad file descriptor) [pid 5654] close(20) = -1 EBADF (Bad file descriptor) [pid 5654] close(21) = -1 EBADF (Bad file descriptor) [pid 5654] close(22) = -1 EBADF (Bad file descriptor) [pid 5654] close(23) = -1 EBADF (Bad file descriptor) [pid 5654] close(24) = -1 EBADF (Bad file descriptor) [pid 5654] close(25) = -1 EBADF (Bad file descriptor) [pid 5654] close(26) = -1 EBADF (Bad file descriptor) [pid 5654] close(27) = -1 EBADF (Bad file descriptor) [pid 5654] close(28) = -1 EBADF (Bad file descriptor) [pid 5654] close(29) = -1 EBADF (Bad file descriptor) [pid 5654] exit_group(0) = ? [pid 5654] +++ exited with 0 +++ [ 117.829072][ T5654] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./13/file1") = 0 [pid 5604] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./13/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./13") = 0 [pid 5604] mkdir("./14", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5655 attached [pid 5655] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 17 [pid 5655] <... set_robust_list resumed>) = 0 [pid 5655] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5655] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5655] chdir("./14" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5655] <... chdir resumed>) = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0) = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "1000", 4) = 4 [pid 5655] close(3) = 0 [pid 5655] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5655] write(1, "executing program\n", 18) = 18 [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5655] munmap(0x7f910aff4000, 138412032) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5655] close(3) = 0 [pid 5655] close(4) = 0 [pid 5655] mkdir("./file1", 0777) = 0 [pid 5655] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5655] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5655] chdir("./file1") = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5655] ioctl(4, LOOP_CLR_FD) = 0 [pid 5655] close(4) = 0 [pid 5655] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5655] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5655] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5655] close(3) = 0 [pid 5655] close(4) = -1 EBADF (Bad file descriptor) [pid 5655] close(5) = -1 EBADF (Bad file descriptor) [pid 5655] close(6) = -1 EBADF (Bad file descriptor) [pid 5655] close(7) = -1 EBADF (Bad file descriptor) [pid 5655] close(8) = -1 EBADF (Bad file descriptor) [ 118.363301][ T5655] loop0: detected capacity change from 0 to 32768 [pid 5655] close(9) = -1 EBADF (Bad file descriptor) [pid 5655] close(10) = -1 EBADF (Bad file descriptor) [pid 5655] close(11) = -1 EBADF (Bad file descriptor) [pid 5655] close(12) = -1 EBADF (Bad file descriptor) [pid 5655] close(13) = -1 EBADF (Bad file descriptor) [pid 5655] close(14) = -1 EBADF (Bad file descriptor) [pid 5655] close(15) = -1 EBADF (Bad file descriptor) [pid 5655] close(16) = -1 EBADF (Bad file descriptor) [pid 5655] close(17) = -1 EBADF (Bad file descriptor) [pid 5655] close(18) = -1 EBADF (Bad file descriptor) [pid 5655] close(19) = -1 EBADF (Bad file descriptor) [pid 5655] close(20) = -1 EBADF (Bad file descriptor) [pid 5655] close(21) = -1 EBADF (Bad file descriptor) [pid 5655] close(22) = -1 EBADF (Bad file descriptor) [pid 5655] close(23) = -1 EBADF (Bad file descriptor) [pid 5655] close(24) = -1 EBADF (Bad file descriptor) [pid 5655] close(25) = -1 EBADF (Bad file descriptor) [ 118.397671][ T5655] ialloc: diAlloc returned -17! [pid 5655] close(26) = -1 EBADF (Bad file descriptor) [pid 5655] close(27) = -1 EBADF (Bad file descriptor) [pid 5655] close(28) = -1 EBADF (Bad file descriptor) [pid 5655] close(29) = -1 EBADF (Bad file descriptor) [pid 5655] exit_group(0) = ? [pid 5655] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5604] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./14/file1") = 0 [pid 5604] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./14/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./14") = 0 [pid 5604] mkdir("./15", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 18 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] chdir("./15") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] write(1, "executing program\n", 18) = 18 executing program [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5656] munmap(0x7f910aff4000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5656] close(3) = 0 [pid 5656] close(4) = 0 [pid 5656] mkdir("./file1", 0777) = 0 [pid 5656] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5656] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file1") = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [pid 5656] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5656] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5656] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5656] close(3) = 0 [pid 5656] close(4) = -1 EBADF (Bad file descriptor) [pid 5656] close(5) = -1 EBADF (Bad file descriptor) [ 118.918060][ T5656] loop0: detected capacity change from 0 to 32768 [pid 5656] close(6) = -1 EBADF (Bad file descriptor) [pid 5656] close(7) = -1 EBADF (Bad file descriptor) [pid 5656] close(8) = -1 EBADF (Bad file descriptor) [pid 5656] close(9) = -1 EBADF (Bad file descriptor) [pid 5656] close(10) = -1 EBADF (Bad file descriptor) [pid 5656] close(11) = -1 EBADF (Bad file descriptor) [pid 5656] close(12) = -1 EBADF (Bad file descriptor) [pid 5656] close(13) = -1 EBADF (Bad file descriptor) [pid 5656] close(14) = -1 EBADF (Bad file descriptor) [pid 5656] close(15) = -1 EBADF (Bad file descriptor) [pid 5656] close(16) = -1 EBADF (Bad file descriptor) [pid 5656] close(17) = -1 EBADF (Bad file descriptor) [pid 5656] close(18) = -1 EBADF (Bad file descriptor) [pid 5656] close(19) = -1 EBADF (Bad file descriptor) [pid 5656] close(20) = -1 EBADF (Bad file descriptor) [pid 5656] close(21) = -1 EBADF (Bad file descriptor) [pid 5656] close(22) = -1 EBADF (Bad file descriptor) [pid 5656] close(23) = -1 EBADF (Bad file descriptor) [pid 5656] close(24) = -1 EBADF (Bad file descriptor) [pid 5656] close(25) = -1 EBADF (Bad file descriptor) [pid 5656] close(26) = -1 EBADF (Bad file descriptor) [pid 5656] close(27) = -1 EBADF (Bad file descriptor) [pid 5656] close(28) = -1 EBADF (Bad file descriptor) [pid 5656] close(29) = -1 EBADF (Bad file descriptor) [pid 5656] exit_group(0) = ? [pid 5656] +++ exited with 0 +++ [ 118.968128][ T5656] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./15/file1") = 0 [pid 5604] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./15/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./15") = 0 [pid 5604] mkdir("./16", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5657 attached [pid 5657] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 19 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] chdir("./16") = 0 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5657] write(1, "executing program\n", 18) = 18 executing program [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5657] munmap(0x7f910aff4000, 138412032) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] close(4) = 0 [pid 5657] mkdir("./file1", 0777) = 0 [pid 5657] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5657] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file1") = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [ 119.461192][ T5657] loop0: detected capacity change from 0 to 32768 [pid 5657] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5657] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5657] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5657] close(3) = 0 [pid 5657] close(4) = -1 EBADF (Bad file descriptor) [pid 5657] close(5) = -1 EBADF (Bad file descriptor) [pid 5657] close(6) = -1 EBADF (Bad file descriptor) [pid 5657] close(7) = -1 EBADF (Bad file descriptor) [pid 5657] close(8) = -1 EBADF (Bad file descriptor) [pid 5657] close(9) = -1 EBADF (Bad file descriptor) [pid 5657] close(10) = -1 EBADF (Bad file descriptor) [pid 5657] close(11) = -1 EBADF (Bad file descriptor) [pid 5657] close(12) = -1 EBADF (Bad file descriptor) [pid 5657] close(13) = -1 EBADF (Bad file descriptor) [pid 5657] close(14) = -1 EBADF (Bad file descriptor) [pid 5657] close(15) = -1 EBADF (Bad file descriptor) [pid 5657] close(16) = -1 EBADF (Bad file descriptor) [pid 5657] close(17) = -1 EBADF (Bad file descriptor) [pid 5657] close(18) = -1 EBADF (Bad file descriptor) [pid 5657] close(19) = -1 EBADF (Bad file descriptor) [pid 5657] close(20) = -1 EBADF (Bad file descriptor) [pid 5657] close(21) = -1 EBADF (Bad file descriptor) [pid 5657] close(22) = -1 EBADF (Bad file descriptor) [pid 5657] close(23) = -1 EBADF (Bad file descriptor) [pid 5657] close(24) = -1 EBADF (Bad file descriptor) [pid 5657] close(25) = -1 EBADF (Bad file descriptor) [pid 5657] close(26) = -1 EBADF (Bad file descriptor) [pid 5657] close(27) = -1 EBADF (Bad file descriptor) [pid 5657] close(28) = -1 EBADF (Bad file descriptor) [pid 5657] close(29) = -1 EBADF (Bad file descriptor) [pid 5657] exit_group(0) = ? [pid 5657] +++ exited with 0 +++ [ 119.521778][ T5657] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./16/file1") = 0 [pid 5604] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./16/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./16") = 0 [pid 5604] mkdir("./17", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5658 attached , child_tidptr=0x55558daac6d0) = 20 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5658] chdir("./17") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5658] setpgid(0, 0) = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5658] write(3, "1000", 4) = 4 [pid 5658] close(3) = 0 [pid 5658] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5658] write(1, "executing program\n", 18) = 18 executing program [pid 5658] memfd_create("syzkaller", 0) = 3 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5658] munmap(0x7f910aff4000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5658] close(3) = 0 [pid 5658] close(4) = 0 [pid 5658] mkdir("./file1", 0777) = 0 [pid 5658] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5658] chdir("./file1") = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5658] ioctl(4, LOOP_CLR_FD) = 0 [pid 5658] close(4) = 0 [ 120.088452][ T5658] loop0: detected capacity change from 0 to 32768 [pid 5658] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5658] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5658] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5658] close(3) = 0 [pid 5658] close(4) = -1 EBADF (Bad file descriptor) [pid 5658] close(5) = -1 EBADF (Bad file descriptor) [pid 5658] close(6) = -1 EBADF (Bad file descriptor) [pid 5658] close(7) = -1 EBADF (Bad file descriptor) [pid 5658] close(8) = -1 EBADF (Bad file descriptor) [pid 5658] close(9) = -1 EBADF (Bad file descriptor) [pid 5658] close(10) = -1 EBADF (Bad file descriptor) [pid 5658] close(11) = -1 EBADF (Bad file descriptor) [pid 5658] close(12) = -1 EBADF (Bad file descriptor) [pid 5658] close(13) = -1 EBADF (Bad file descriptor) [pid 5658] close(14) = -1 EBADF (Bad file descriptor) [pid 5658] close(15) = -1 EBADF (Bad file descriptor) [pid 5658] close(16) = -1 EBADF (Bad file descriptor) [ 120.146791][ T5658] ialloc: diAlloc returned -17! [pid 5658] close(17) = -1 EBADF (Bad file descriptor) [pid 5658] close(18) = -1 EBADF (Bad file descriptor) [pid 5658] close(19) = -1 EBADF (Bad file descriptor) [pid 5658] close(20) = -1 EBADF (Bad file descriptor) [pid 5658] close(21) = -1 EBADF (Bad file descriptor) [pid 5658] close(22) = -1 EBADF (Bad file descriptor) [pid 5658] close(23) = -1 EBADF (Bad file descriptor) [pid 5658] close(24) = -1 EBADF (Bad file descriptor) [pid 5658] close(25) = -1 EBADF (Bad file descriptor) [pid 5658] close(26) = -1 EBADF (Bad file descriptor) [pid 5658] close(27) = -1 EBADF (Bad file descriptor) [pid 5658] close(28) = -1 EBADF (Bad file descriptor) [pid 5658] close(29) = -1 EBADF (Bad file descriptor) [pid 5658] exit_group(0) = ? [pid 5658] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./17/file1") = 0 [pid 5604] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./17/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./17") = 0 [pid 5604] mkdir("./18", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5659 attached [pid 5659] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 21 [pid 5659] <... set_robust_list resumed>) = 0 [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5659] chdir("./18" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5659] <... chdir resumed>) = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5659] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] write(1, "executing program\n", 18) = 18 executing program [pid 5659] memfd_create("syzkaller", 0) = 3 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5659] munmap(0x7f910aff4000, 138412032) = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5659] close(3) = 0 [pid 5659] close(4) = 0 [pid 5659] mkdir("./file1", 0777) = 0 [pid 5659] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5659] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5659] chdir("./file1") = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5659] ioctl(4, LOOP_CLR_FD) = 0 [pid 5659] close(4) = 0 [pid 5659] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5659] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5659] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5659] close(3) = 0 [pid 5659] close(4) = -1 EBADF (Bad file descriptor) [pid 5659] close(5) = -1 EBADF (Bad file descriptor) [pid 5659] close(6) = -1 EBADF (Bad file descriptor) [pid 5659] close(7) = -1 EBADF (Bad file descriptor) [ 120.706258][ T5659] loop0: detected capacity change from 0 to 32768 [pid 5659] close(8) = -1 EBADF (Bad file descriptor) [pid 5659] close(9) = -1 EBADF (Bad file descriptor) [pid 5659] close(10) = -1 EBADF (Bad file descriptor) [pid 5659] close(11) = -1 EBADF (Bad file descriptor) [pid 5659] close(12) = -1 EBADF (Bad file descriptor) [pid 5659] close(13) = -1 EBADF (Bad file descriptor) [pid 5659] close(14) = -1 EBADF (Bad file descriptor) [pid 5659] close(15) = -1 EBADF (Bad file descriptor) [pid 5659] close(16) = -1 EBADF (Bad file descriptor) [pid 5659] close(17) = -1 EBADF (Bad file descriptor) [pid 5659] close(18) = -1 EBADF (Bad file descriptor) [pid 5659] close(19) = -1 EBADF (Bad file descriptor) [pid 5659] close(20) = -1 EBADF (Bad file descriptor) [pid 5659] close(21) = -1 EBADF (Bad file descriptor) [pid 5659] close(22) = -1 EBADF (Bad file descriptor) [pid 5659] close(23) = -1 EBADF (Bad file descriptor) [pid 5659] close(24) = -1 EBADF (Bad file descriptor) [pid 5659] close(25) = -1 EBADF (Bad file descriptor) [pid 5659] close(26) = -1 EBADF (Bad file descriptor) [pid 5659] close(27) = -1 EBADF (Bad file descriptor) [pid 5659] close(28) = -1 EBADF (Bad file descriptor) [pid 5659] close(29) = -1 EBADF (Bad file descriptor) [pid 5659] exit_group(0) = ? [pid 5659] +++ exited with 0 +++ [ 120.756877][ T5659] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./18/file1") = 0 [pid 5604] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./18/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./18") = 0 [pid 5604] mkdir("./19", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558daac6d0) = 22 ci2-upstream-fs/strace-static-x86_64: Process 5660 attached [pid 5660] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5660] chdir("./19") = 0 [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5660] setpgid(0, 0) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5660] write(3, "1000", 4) = 4 [pid 5660] close(3) = 0 [pid 5660] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5660] write(1, "executing program\n", 18) = 18 [pid 5660] memfd_create("syzkaller", 0) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5660] munmap(0x7f910aff4000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5660] close(3) = 0 [pid 5660] close(4) = 0 [pid 5660] mkdir("./file1", 0777) = 0 [pid 5660] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file1") = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5660] ioctl(4, LOOP_CLR_FD) = 0 [pid 5660] close(4) = 0 [pid 5660] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 121.276505][ T5660] loop0: detected capacity change from 0 to 32768 [pid 5660] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5660] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5660] close(3) = 0 [pid 5660] close(4) = -1 EBADF (Bad file descriptor) [pid 5660] close(5) = -1 EBADF (Bad file descriptor) [pid 5660] close(6) = -1 EBADF (Bad file descriptor) [pid 5660] close(7) = -1 EBADF (Bad file descriptor) [pid 5660] close(8) = -1 EBADF (Bad file descriptor) [pid 5660] close(9) = -1 EBADF (Bad file descriptor) [pid 5660] close(10) = -1 EBADF (Bad file descriptor) [pid 5660] close(11) = -1 EBADF (Bad file descriptor) [pid 5660] close(12) = -1 EBADF (Bad file descriptor) [pid 5660] close(13) = -1 EBADF (Bad file descriptor) [pid 5660] close(14) = -1 EBADF (Bad file descriptor) [pid 5660] close(15) = -1 EBADF (Bad file descriptor) [pid 5660] close(16) = -1 EBADF (Bad file descriptor) [pid 5660] close(17) = -1 EBADF (Bad file descriptor) [pid 5660] close(18) = -1 EBADF (Bad file descriptor) [pid 5660] close(19) = -1 EBADF (Bad file descriptor) [pid 5660] close(20) = -1 EBADF (Bad file descriptor) [pid 5660] close(21) = -1 EBADF (Bad file descriptor) [pid 5660] close(22) = -1 EBADF (Bad file descriptor) [pid 5660] close(23) = -1 EBADF (Bad file descriptor) [pid 5660] close(24) = -1 EBADF (Bad file descriptor) [pid 5660] close(25) = -1 EBADF (Bad file descriptor) [pid 5660] close(26) = -1 EBADF (Bad file descriptor) [pid 5660] close(27) = -1 EBADF (Bad file descriptor) [pid 5660] close(28) = -1 EBADF (Bad file descriptor) [pid 5660] close(29) = -1 EBADF (Bad file descriptor) [pid 5660] exit_group(0) = ? [pid 5660] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [ 121.323814][ T5660] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./19/file1") = 0 [pid 5604] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./19/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./19") = 0 [pid 5604] mkdir("./20", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5661 attached , child_tidptr=0x55558daac6d0) = 23 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5661] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5661] <... set_robust_list resumed>) = 0 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5661] chdir("./20") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] write(1, "executing program\n", 18) = 18 executing program [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5661] munmap(0x7f910aff4000, 138412032) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5661] close(3) = 0 [pid 5661] close(4) = 0 [pid 5661] mkdir("./file1", 0777) = 0 [pid 5661] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5661] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file1") = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4) = 0 [pid 5661] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 121.806018][ T5661] loop0: detected capacity change from 0 to 32768 [pid 5661] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5661] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5661] close(3) = 0 [pid 5661] close(4) = -1 EBADF (Bad file descriptor) [pid 5661] close(5) = -1 EBADF (Bad file descriptor) [pid 5661] close(6) = -1 EBADF (Bad file descriptor) [pid 5661] close(7) = -1 EBADF (Bad file descriptor) [pid 5661] close(8) = -1 EBADF (Bad file descriptor) [pid 5661] close(9) = -1 EBADF (Bad file descriptor) [pid 5661] close(10) = -1 EBADF (Bad file descriptor) [pid 5661] close(11) = -1 EBADF (Bad file descriptor) [pid 5661] close(12) = -1 EBADF (Bad file descriptor) [pid 5661] close(13) = -1 EBADF (Bad file descriptor) [pid 5661] close(14) = -1 EBADF (Bad file descriptor) [pid 5661] close(15) = -1 EBADF (Bad file descriptor) [pid 5661] close(16) = -1 EBADF (Bad file descriptor) [pid 5661] close(17) = -1 EBADF (Bad file descriptor) [pid 5661] close(18) = -1 EBADF (Bad file descriptor) [pid 5661] close(19) = -1 EBADF (Bad file descriptor) [pid 5661] close(20) = -1 EBADF (Bad file descriptor) [pid 5661] close(21) = -1 EBADF (Bad file descriptor) [pid 5661] close(22) = -1 EBADF (Bad file descriptor) [pid 5661] close(23) = -1 EBADF (Bad file descriptor) [pid 5661] close(24) = -1 EBADF (Bad file descriptor) [pid 5661] close(25) = -1 EBADF (Bad file descriptor) [pid 5661] close(26) = -1 EBADF (Bad file descriptor) [pid 5661] close(27) = -1 EBADF (Bad file descriptor) [pid 5661] close(28) = -1 EBADF (Bad file descriptor) [pid 5661] close(29) = -1 EBADF (Bad file descriptor) [ 121.862240][ T5661] ialloc: diAlloc returned -17! [pid 5661] exit_group(0) = ? [pid 5661] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./20/file1") = 0 [pid 5604] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./20/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./20") = 0 [pid 5604] mkdir("./21", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5662 attached , child_tidptr=0x55558daac6d0) = 24 [pid 5662] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5662] chdir("./21") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] write(1, "executing program\n", 18) = 18 executing program [pid 5662] memfd_create("syzkaller", 0) = 3 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5662] munmap(0x7f910aff4000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5662] close(3) = 0 [pid 5662] close(4) = 0 [pid 5662] mkdir("./file1", 0777) = 0 [pid 5662] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5662] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5662] chdir("./file1") = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5662] ioctl(4, LOOP_CLR_FD) = 0 [pid 5662] close(4) = 0 [pid 5662] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5662] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5662] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5662] close(3) = 0 [pid 5662] close(4) = -1 EBADF (Bad file descriptor) [pid 5662] close(5) = -1 EBADF (Bad file descriptor) [pid 5662] close(6) = -1 EBADF (Bad file descriptor) [pid 5662] close(7) = -1 EBADF (Bad file descriptor) [pid 5662] close(8) = -1 EBADF (Bad file descriptor) [pid 5662] close(9) = -1 EBADF (Bad file descriptor) [pid 5662] close(10) = -1 EBADF (Bad file descriptor) [pid 5662] close(11) = -1 EBADF (Bad file descriptor) [pid 5662] close(12) = -1 EBADF (Bad file descriptor) [pid 5662] close(13) = -1 EBADF (Bad file descriptor) [pid 5662] close(14) = -1 EBADF (Bad file descriptor) [pid 5662] close(15) = -1 EBADF (Bad file descriptor) [pid 5662] close(16) = -1 EBADF (Bad file descriptor) [pid 5662] close(17) = -1 EBADF (Bad file descriptor) [pid 5662] close(18) = -1 EBADF (Bad file descriptor) [pid 5662] close(19) = -1 EBADF (Bad file descriptor) [pid 5662] close(20) = -1 EBADF (Bad file descriptor) [pid 5662] close(21) = -1 EBADF (Bad file descriptor) [pid 5662] close(22) = -1 EBADF (Bad file descriptor) [pid 5662] close(23) = -1 EBADF (Bad file descriptor) [pid 5662] close(24) = -1 EBADF (Bad file descriptor) [pid 5662] close(25) = -1 EBADF (Bad file descriptor) [pid 5662] close(26) = -1 EBADF (Bad file descriptor) [pid 5662] close(27) = -1 EBADF (Bad file descriptor) [pid 5662] close(28) = -1 EBADF (Bad file descriptor) [pid 5662] close(29) = -1 EBADF (Bad file descriptor) [pid 5662] exit_group(0) = ? [ 122.333770][ T5662] loop0: detected capacity change from 0 to 32768 [ 122.374733][ T5662] ialloc: diAlloc returned -17! [pid 5662] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5604] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./21/file1") = 0 [pid 5604] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./21/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./21") = 0 [pid 5604] mkdir("./22", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558daac6d0) = 25 ci2-upstream-fs/strace-static-x86_64: Process 5663 attached [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5663] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5663] <... set_robust_list resumed>) = 0 [pid 5663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5663] chdir("./22") = 0 [pid 5663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5663] setpgid(0, 0) = 0 [pid 5663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5663] write(3, "1000", 4) = 4 [pid 5663] close(3) = 0 [pid 5663] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5663] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5663] write(1, "executing program\n", 18) = 18 [pid 5663] memfd_create("syzkaller", 0) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5663] munmap(0x7f910aff4000, 138412032) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] close(4) = 0 [pid 5663] mkdir("./file1", 0777) = 0 [pid 5663] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5663] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 122.840301][ T5663] loop0: detected capacity change from 0 to 32768 [pid 5663] chdir("./file1") = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [pid 5663] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5663] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5663] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5663] close(3) = 0 [pid 5663] close(4) = -1 EBADF (Bad file descriptor) [pid 5663] close(5) = -1 EBADF (Bad file descriptor) [pid 5663] close(6) = -1 EBADF (Bad file descriptor) [pid 5663] close(7) = -1 EBADF (Bad file descriptor) [pid 5663] close(8) = -1 EBADF (Bad file descriptor) [pid 5663] close(9) = -1 EBADF (Bad file descriptor) [pid 5663] close(10) = -1 EBADF (Bad file descriptor) [pid 5663] close(11) = -1 EBADF (Bad file descriptor) [pid 5663] close(12) = -1 EBADF (Bad file descriptor) [pid 5663] close(13) = -1 EBADF (Bad file descriptor) [pid 5663] close(14) = -1 EBADF (Bad file descriptor) [pid 5663] close(15) = -1 EBADF (Bad file descriptor) [pid 5663] close(16) = -1 EBADF (Bad file descriptor) [pid 5663] close(17) = -1 EBADF (Bad file descriptor) [pid 5663] close(18) = -1 EBADF (Bad file descriptor) [pid 5663] close(19) = -1 EBADF (Bad file descriptor) [pid 5663] close(20) = -1 EBADF (Bad file descriptor) [pid 5663] close(21) = -1 EBADF (Bad file descriptor) [pid 5663] close(22) = -1 EBADF (Bad file descriptor) [pid 5663] close(23) = -1 EBADF (Bad file descriptor) [pid 5663] close(24) = -1 EBADF (Bad file descriptor) [pid 5663] close(25) = -1 EBADF (Bad file descriptor) [pid 5663] close(26) = -1 EBADF (Bad file descriptor) [pid 5663] close(27) = -1 EBADF (Bad file descriptor) [pid 5663] close(28) = -1 EBADF (Bad file descriptor) [pid 5663] close(29) = -1 EBADF (Bad file descriptor) [pid 5663] exit_group(0) = ? [pid 5663] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 122.946905][ T5663] ialloc: diAlloc returned -17! [pid 5604] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./22/file1") = 0 [pid 5604] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./22/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./22") = 0 [pid 5604] mkdir("./23", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5664 attached [pid 5664] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 26 [pid 5664] <... set_robust_list resumed>) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5664] chdir("./23" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] <... chdir resumed>) = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5664] setpgid(0, 0) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5664] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] write(1, "executing program\n", 18) = 18 executing program [pid 5664] memfd_create("syzkaller", 0) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5664] munmap(0x7f910aff4000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5664] close(3) = 0 [pid 5664] close(4) = 0 [pid 5664] mkdir("./file1", 0777) = 0 [pid 5664] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5664] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5664] chdir("./file1") = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5664] ioctl(4, LOOP_CLR_FD) = 0 [pid 5664] close(4) = 0 [pid 5664] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5664] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 123.429076][ T5664] loop0: detected capacity change from 0 to 32768 [pid 5664] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5664] close(3) = 0 [pid 5664] close(4) = -1 EBADF (Bad file descriptor) [pid 5664] close(5) = -1 EBADF (Bad file descriptor) [pid 5664] close(6) = -1 EBADF (Bad file descriptor) [pid 5664] close(7) = -1 EBADF (Bad file descriptor) [pid 5664] close(8) = -1 EBADF (Bad file descriptor) [pid 5664] close(9) = -1 EBADF (Bad file descriptor) [pid 5664] close(10) = -1 EBADF (Bad file descriptor) [pid 5664] close(11) = -1 EBADF (Bad file descriptor) [pid 5664] close(12) = -1 EBADF (Bad file descriptor) [pid 5664] close(13) = -1 EBADF (Bad file descriptor) [pid 5664] close(14) = -1 EBADF (Bad file descriptor) [pid 5664] close(15) = -1 EBADF (Bad file descriptor) [pid 5664] close(16) = -1 EBADF (Bad file descriptor) [pid 5664] close(17) = -1 EBADF (Bad file descriptor) [pid 5664] close(18) = -1 EBADF (Bad file descriptor) [pid 5664] close(19) = -1 EBADF (Bad file descriptor) [pid 5664] close(20) = -1 EBADF (Bad file descriptor) [pid 5664] close(21) = -1 EBADF (Bad file descriptor) [ 123.476654][ T5664] ialloc: diAlloc returned -17! [pid 5664] close(22) = -1 EBADF (Bad file descriptor) [pid 5664] close(23) = -1 EBADF (Bad file descriptor) [pid 5664] close(24) = -1 EBADF (Bad file descriptor) [pid 5664] close(25) = -1 EBADF (Bad file descriptor) [pid 5664] close(26) = -1 EBADF (Bad file descriptor) [pid 5664] close(27) = -1 EBADF (Bad file descriptor) [pid 5664] close(28) = -1 EBADF (Bad file descriptor) [pid 5664] close(29) = -1 EBADF (Bad file descriptor) [pid 5664] exit_group(0) = ? [pid 5664] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./23/file1") = 0 [pid 5604] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./23/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./23") = 0 [pid 5604] mkdir("./24", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5665 attached [pid 5665] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 27 [pid 5665] <... set_robust_list resumed>) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5665] chdir("./24" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5665] <... chdir resumed>) = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] write(1, "executing program\n", 18) = 18 executing program [pid 5665] memfd_create("syzkaller", 0) = 3 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5665] munmap(0x7f910aff4000, 138412032) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5665] close(3) = 0 [pid 5665] close(4) = 0 [pid 5665] mkdir("./file1", 0777) = 0 [pid 5665] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5665] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5665] chdir("./file1") = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5665] ioctl(4, LOOP_CLR_FD) = 0 [pid 5665] close(4) = 0 [pid 5665] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5665] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5665] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5665] close(3) = 0 [pid 5665] close(4) = -1 EBADF (Bad file descriptor) [pid 5665] close(5) = -1 EBADF (Bad file descriptor) [pid 5665] close(6) = -1 EBADF (Bad file descriptor) [pid 5665] close(7) = -1 EBADF (Bad file descriptor) [pid 5665] close(8) = -1 EBADF (Bad file descriptor) [pid 5665] close(9) = -1 EBADF (Bad file descriptor) [pid 5665] close(10) = -1 EBADF (Bad file descriptor) [pid 5665] close(11) = -1 EBADF (Bad file descriptor) [pid 5665] close(12) = -1 EBADF (Bad file descriptor) [pid 5665] close(13) = -1 EBADF (Bad file descriptor) [pid 5665] close(14) = -1 EBADF (Bad file descriptor) [pid 5665] close(15) = -1 EBADF (Bad file descriptor) [pid 5665] close(16) = -1 EBADF (Bad file descriptor) [pid 5665] close(17) = -1 EBADF (Bad file descriptor) [pid 5665] close(18) = -1 EBADF (Bad file descriptor) [pid 5665] close(19) = -1 EBADF (Bad file descriptor) [pid 5665] close(20) = -1 EBADF (Bad file descriptor) [pid 5665] close(21) = -1 EBADF (Bad file descriptor) [ 124.018206][ T5665] loop0: detected capacity change from 0 to 32768 [ 124.064543][ T5665] ialloc: diAlloc returned -17! [pid 5665] close(22) = -1 EBADF (Bad file descriptor) [pid 5665] close(23) = -1 EBADF (Bad file descriptor) [pid 5665] close(24) = -1 EBADF (Bad file descriptor) [pid 5665] close(25) = -1 EBADF (Bad file descriptor) [pid 5665] close(26) = -1 EBADF (Bad file descriptor) [pid 5665] close(27) = -1 EBADF (Bad file descriptor) [pid 5665] close(28) = -1 EBADF (Bad file descriptor) [pid 5665] close(29) = -1 EBADF (Bad file descriptor) [pid 5665] exit_group(0) = ? [pid 5665] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./24/file1") = 0 [pid 5604] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./24/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./24") = 0 [pid 5604] mkdir("./25", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5666 attached [pid 5666] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 28 [pid 5666] <... set_robust_list resumed>) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5666] chdir("./25") = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5666] setpgid(0, 0) = 0 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5666] write(3, "1000", 4) = 4 [pid 5666] close(3) = 0 [pid 5666] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5666] write(1, "executing program\n", 18) = 18 executing program [pid 5666] memfd_create("syzkaller", 0) = 3 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5666] munmap(0x7f910aff4000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5666] close(3) = 0 [pid 5666] close(4) = 0 [pid 5666] mkdir("./file1", 0777) = 0 [pid 5666] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5666] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5666] chdir("./file1") = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5666] ioctl(4, LOOP_CLR_FD) = 0 [pid 5666] close(4) = 0 [pid 5666] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5666] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5666] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5666] close(3) = 0 [pid 5666] close(4) = -1 EBADF (Bad file descriptor) [pid 5666] close(5) = -1 EBADF (Bad file descriptor) [pid 5666] close(6) = -1 EBADF (Bad file descriptor) [pid 5666] close(7) = -1 EBADF (Bad file descriptor) [pid 5666] close(8) = -1 EBADF (Bad file descriptor) [pid 5666] close(9) = -1 EBADF (Bad file descriptor) [pid 5666] close(10) = -1 EBADF (Bad file descriptor) [pid 5666] close(11) = -1 EBADF (Bad file descriptor) [pid 5666] close(12) = -1 EBADF (Bad file descriptor) [pid 5666] close(13) = -1 EBADF (Bad file descriptor) [pid 5666] close(14) = -1 EBADF (Bad file descriptor) [pid 5666] close(15) = -1 EBADF (Bad file descriptor) [pid 5666] close(16) = -1 EBADF (Bad file descriptor) [pid 5666] close(17) = -1 EBADF (Bad file descriptor) [pid 5666] close(18) = -1 EBADF (Bad file descriptor) [pid 5666] close(19) = -1 EBADF (Bad file descriptor) [pid 5666] close(20) = -1 EBADF (Bad file descriptor) [pid 5666] close(21) = -1 EBADF (Bad file descriptor) [pid 5666] close(22) = -1 EBADF (Bad file descriptor) [pid 5666] close(23) = -1 EBADF (Bad file descriptor) [pid 5666] close(24) = -1 EBADF (Bad file descriptor) [ 124.572055][ T5666] loop0: detected capacity change from 0 to 32768 [ 124.607942][ T5666] ialloc: diAlloc returned -17! [pid 5666] close(25) = -1 EBADF (Bad file descriptor) [pid 5666] close(26) = -1 EBADF (Bad file descriptor) [pid 5666] close(27) = -1 EBADF (Bad file descriptor) [pid 5666] close(28) = -1 EBADF (Bad file descriptor) [pid 5666] close(29) = -1 EBADF (Bad file descriptor) [pid 5666] exit_group(0) = ? [pid 5666] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5604] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./25/file1") = 0 [pid 5604] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./25/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./25") = 0 [pid 5604] mkdir("./26", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5667 attached , child_tidptr=0x55558daac6d0) = 29 [pid 5667] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] chdir("./26" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] <... chdir resumed>) = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5667] write(1, "executing program\n", 18) = 18 [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5667] munmap(0x7f910aff4000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5667] close(3) = 0 [pid 5667] close(4) = 0 [pid 5667] mkdir("./file1", 0777) = 0 [pid 5667] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5667] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5667] chdir("./file1") = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5667] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5667] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5667] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5667] close(3) = 0 [pid 5667] close(4) = -1 EBADF (Bad file descriptor) [pid 5667] close(5) = -1 EBADF (Bad file descriptor) [ 125.127236][ T5667] loop0: detected capacity change from 0 to 32768 [pid 5667] close(6) = -1 EBADF (Bad file descriptor) [pid 5667] close(7) = -1 EBADF (Bad file descriptor) [pid 5667] close(8) = -1 EBADF (Bad file descriptor) [pid 5667] close(9) = -1 EBADF (Bad file descriptor) [pid 5667] close(10) = -1 EBADF (Bad file descriptor) [pid 5667] close(11) = -1 EBADF (Bad file descriptor) [pid 5667] close(12) = -1 EBADF (Bad file descriptor) [pid 5667] close(13) = -1 EBADF (Bad file descriptor) [pid 5667] close(14) = -1 EBADF (Bad file descriptor) [pid 5667] close(15) = -1 EBADF (Bad file descriptor) [pid 5667] close(16) = -1 EBADF (Bad file descriptor) [pid 5667] close(17) = -1 EBADF (Bad file descriptor) [pid 5667] close(18) = -1 EBADF (Bad file descriptor) [pid 5667] close(19) = -1 EBADF (Bad file descriptor) [pid 5667] close(20) = -1 EBADF (Bad file descriptor) [pid 5667] close(21) = -1 EBADF (Bad file descriptor) [pid 5667] close(22) = -1 EBADF (Bad file descriptor) [ 125.167496][ T5667] ialloc: diAlloc returned -17! [pid 5667] close(23) = -1 EBADF (Bad file descriptor) [pid 5667] close(24) = -1 EBADF (Bad file descriptor) [pid 5667] close(25) = -1 EBADF (Bad file descriptor) [pid 5667] close(26) = -1 EBADF (Bad file descriptor) [pid 5667] close(27) = -1 EBADF (Bad file descriptor) [pid 5667] close(28) = -1 EBADF (Bad file descriptor) [pid 5667] close(29) = -1 EBADF (Bad file descriptor) [pid 5667] exit_group(0) = ? [pid 5667] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./26/file1") = 0 [pid 5604] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./26/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./26") = 0 [pid 5604] mkdir("./27", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5668 attached [pid 5668] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 30 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5668] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5668] chdir("./27") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5668] write(1, "executing program\n", 18) = 18 executing program [pid 5668] memfd_create("syzkaller", 0) = 3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5668] munmap(0x7f910aff4000, 138412032) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5668] close(3) = 0 [pid 5668] close(4) = 0 [pid 5668] mkdir("./file1", 0777) = 0 [pid 5668] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5668] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5668] chdir("./file1") = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [ 125.659650][ T5668] loop0: detected capacity change from 0 to 32768 [pid 5668] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5668] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5668] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5668] close(3) = 0 [pid 5668] close(4) = -1 EBADF (Bad file descriptor) [pid 5668] close(5) = -1 EBADF (Bad file descriptor) [pid 5668] close(6) = -1 EBADF (Bad file descriptor) [pid 5668] close(7) = -1 EBADF (Bad file descriptor) [pid 5668] close(8) = -1 EBADF (Bad file descriptor) [pid 5668] close(9) = -1 EBADF (Bad file descriptor) [pid 5668] close(10) = -1 EBADF (Bad file descriptor) [pid 5668] close(11) = -1 EBADF (Bad file descriptor) [pid 5668] close(12) = -1 EBADF (Bad file descriptor) [pid 5668] close(13) = -1 EBADF (Bad file descriptor) [pid 5668] close(14) = -1 EBADF (Bad file descriptor) [pid 5668] close(15) = -1 EBADF (Bad file descriptor) [pid 5668] close(16) = -1 EBADF (Bad file descriptor) [pid 5668] close(17) = -1 EBADF (Bad file descriptor) [pid 5668] close(18) = -1 EBADF (Bad file descriptor) [pid 5668] close(19) = -1 EBADF (Bad file descriptor) [pid 5668] close(20) = -1 EBADF (Bad file descriptor) [pid 5668] close(21) = -1 EBADF (Bad file descriptor) [pid 5668] close(22) = -1 EBADF (Bad file descriptor) [pid 5668] close(23) = -1 EBADF (Bad file descriptor) [pid 5668] close(24) = -1 EBADF (Bad file descriptor) [pid 5668] close(25) = -1 EBADF (Bad file descriptor) [pid 5668] close(26) = -1 EBADF (Bad file descriptor) [pid 5668] close(27) = -1 EBADF (Bad file descriptor) [pid 5668] close(28) = -1 EBADF (Bad file descriptor) [pid 5668] close(29) = -1 EBADF (Bad file descriptor) [pid 5668] exit_group(0) = ? [pid 5668] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [ 125.730176][ T5668] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./27/file1") = 0 [pid 5604] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./27/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./27") = 0 [pid 5604] mkdir("./28", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5669 attached [pid 5669] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 31 [pid 5669] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] chdir("./28") = 0 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5669] setpgid(0, 0) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5669] write(3, "1000", 4) = 4 [pid 5669] close(3) = 0 [pid 5669] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5669] write(1, "executing program\n", 18) = 18 executing program [pid 5669] memfd_create("syzkaller", 0) = 3 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5669] munmap(0x7f910aff4000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5669] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5669] close(3) = 0 [pid 5669] close(4) = 0 [pid 5669] mkdir("./file1", 0777) = 0 [pid 5669] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5669] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5669] chdir("./file1") = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 126.250073][ T5669] loop0: detected capacity change from 0 to 32768 [pid 5669] ioctl(4, LOOP_CLR_FD) = 0 [pid 5669] close(4) = 0 [pid 5669] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5669] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5669] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5669] close(3) = 0 [pid 5669] close(4) = -1 EBADF (Bad file descriptor) [pid 5669] close(5) = -1 EBADF (Bad file descriptor) [pid 5669] close(6) = -1 EBADF (Bad file descriptor) [pid 5669] close(7) = -1 EBADF (Bad file descriptor) [pid 5669] close(8) = -1 EBADF (Bad file descriptor) [pid 5669] close(9) = -1 EBADF (Bad file descriptor) [pid 5669] close(10) = -1 EBADF (Bad file descriptor) [pid 5669] close(11) = -1 EBADF (Bad file descriptor) [pid 5669] close(12) = -1 EBADF (Bad file descriptor) [pid 5669] close(13) = -1 EBADF (Bad file descriptor) [pid 5669] close(14) = -1 EBADF (Bad file descriptor) [pid 5669] close(15) = -1 EBADF (Bad file descriptor) [pid 5669] close(16) = -1 EBADF (Bad file descriptor) [pid 5669] close(17) = -1 EBADF (Bad file descriptor) [pid 5669] close(18) = -1 EBADF (Bad file descriptor) [pid 5669] close(19) = -1 EBADF (Bad file descriptor) [pid 5669] close(20) = -1 EBADF (Bad file descriptor) [pid 5669] close(21) = -1 EBADF (Bad file descriptor) [pid 5669] close(22) = -1 EBADF (Bad file descriptor) [pid 5669] close(23) = -1 EBADF (Bad file descriptor) [pid 5669] close(24) = -1 EBADF (Bad file descriptor) [pid 5669] close(25) = -1 EBADF (Bad file descriptor) [pid 5669] close(26) = -1 EBADF (Bad file descriptor) [pid 5669] close(27) = -1 EBADF (Bad file descriptor) [pid 5669] close(28) = -1 EBADF (Bad file descriptor) [pid 5669] close(29) = -1 EBADF (Bad file descriptor) [ 126.326230][ T5669] ialloc: diAlloc returned -17! [pid 5669] exit_group(0) = ? [pid 5669] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./28/file1") = 0 [pid 5604] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./28/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./28") = 0 [pid 5604] mkdir("./29", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5670 attached [pid 5670] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5670] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 32 [pid 5670] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5670] chdir("./29" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] <... chdir resumed>) = 0 [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5670] setpgid(0, 0) = 0 [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] write(3, "1000", 4) = 4 [pid 5670] close(3) = 0 [pid 5670] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5670] write(1, "executing program\n", 18) = 18 executing program [pid 5670] memfd_create("syzkaller", 0) = 3 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5670] munmap(0x7f910aff4000, 138412032) = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5670] close(3) = 0 [pid 5670] close(4) = 0 [pid 5670] mkdir("./file1", 0777) = 0 [pid 5670] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5670] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5670] chdir("./file1") = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5670] ioctl(4, LOOP_CLR_FD) = 0 [pid 5670] close(4) = 0 [pid 5670] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5670] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5670] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5670] close(3) = 0 [pid 5670] close(4) = -1 EBADF (Bad file descriptor) [pid 5670] close(5) = -1 EBADF (Bad file descriptor) [ 126.784438][ T5670] loop0: detected capacity change from 0 to 32768 [pid 5670] close(6) = -1 EBADF (Bad file descriptor) [pid 5670] close(7) = -1 EBADF (Bad file descriptor) [pid 5670] close(8) = -1 EBADF (Bad file descriptor) [pid 5670] close(9) = -1 EBADF (Bad file descriptor) [pid 5670] close(10) = -1 EBADF (Bad file descriptor) [pid 5670] close(11) = -1 EBADF (Bad file descriptor) [pid 5670] close(12) = -1 EBADF (Bad file descriptor) [pid 5670] close(13) = -1 EBADF (Bad file descriptor) [pid 5670] close(14) = -1 EBADF (Bad file descriptor) [pid 5670] close(15) = -1 EBADF (Bad file descriptor) [pid 5670] close(16) = -1 EBADF (Bad file descriptor) [pid 5670] close(17) = -1 EBADF (Bad file descriptor) [pid 5670] close(18) = -1 EBADF (Bad file descriptor) [pid 5670] close(19) = -1 EBADF (Bad file descriptor) [pid 5670] close(20) = -1 EBADF (Bad file descriptor) [pid 5670] close(21) = -1 EBADF (Bad file descriptor) [pid 5670] close(22) = -1 EBADF (Bad file descriptor) [pid 5670] close(23) = -1 EBADF (Bad file descriptor) [pid 5670] close(24) = -1 EBADF (Bad file descriptor) [pid 5670] close(25) = -1 EBADF (Bad file descriptor) [pid 5670] close(26) = -1 EBADF (Bad file descriptor) [pid 5670] close(27) = -1 EBADF (Bad file descriptor) [pid 5670] close(28) = -1 EBADF (Bad file descriptor) [pid 5670] close(29) = -1 EBADF (Bad file descriptor) [pid 5670] exit_group(0) = ? [pid 5670] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [ 126.825205][ T5670] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./29/file1") = 0 [pid 5604] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./29/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./29") = 0 [pid 5604] mkdir("./30", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5671 attached , child_tidptr=0x55558daac6d0) = 33 [pid 5671] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5671] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] chdir("./30") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5671] write(1, "executing program\n", 18) = 18 [pid 5671] memfd_create("syzkaller", 0) = 3 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5671] munmap(0x7f910aff4000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5671] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5671] close(3) = 0 [pid 5671] close(4) = 0 [pid 5671] mkdir("./file1", 0777) = 0 [pid 5671] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5671] chdir("./file1") = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5671] ioctl(4, LOOP_CLR_FD) = 0 [pid 5671] close(4) = 0 [pid 5671] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5671] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 127.304439][ T5671] loop0: detected capacity change from 0 to 32768 [pid 5671] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5671] close(3) = 0 [pid 5671] close(4) = -1 EBADF (Bad file descriptor) [pid 5671] close(5) = -1 EBADF (Bad file descriptor) [pid 5671] close(6) = -1 EBADF (Bad file descriptor) [pid 5671] close(7) = -1 EBADF (Bad file descriptor) [pid 5671] close(8) = -1 EBADF (Bad file descriptor) [pid 5671] close(9) = -1 EBADF (Bad file descriptor) [pid 5671] close(10) = -1 EBADF (Bad file descriptor) [pid 5671] close(11) = -1 EBADF (Bad file descriptor) [pid 5671] close(12) = -1 EBADF (Bad file descriptor) [pid 5671] close(13) = -1 EBADF (Bad file descriptor) [pid 5671] close(14) = -1 EBADF (Bad file descriptor) [pid 5671] close(15) = -1 EBADF (Bad file descriptor) [pid 5671] close(16) = -1 EBADF (Bad file descriptor) [pid 5671] close(17) = -1 EBADF (Bad file descriptor) [pid 5671] close(18) = -1 EBADF (Bad file descriptor) [pid 5671] close(19) = -1 EBADF (Bad file descriptor) [pid 5671] close(20) = -1 EBADF (Bad file descriptor) [pid 5671] close(21) = -1 EBADF (Bad file descriptor) [pid 5671] close(22) = -1 EBADF (Bad file descriptor) [pid 5671] close(23) = -1 EBADF (Bad file descriptor) [pid 5671] close(24) = -1 EBADF (Bad file descriptor) [pid 5671] close(25) = -1 EBADF (Bad file descriptor) [pid 5671] close(26) = -1 EBADF (Bad file descriptor) [pid 5671] close(27) = -1 EBADF (Bad file descriptor) [pid 5671] close(28) = -1 EBADF (Bad file descriptor) [pid 5671] close(29) = -1 EBADF (Bad file descriptor) [pid 5671] exit_group(0) = ? [ 127.352644][ T5671] ialloc: diAlloc returned -17! [pid 5671] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./30/file1") = 0 [pid 5604] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./30/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./30") = 0 [pid 5604] mkdir("./31", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5672 attached [pid 5672] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 34 [pid 5672] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5672] chdir("./31") = 0 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5672] setpgid(0, 0) = 0 [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5672] write(3, "1000", 4) = 4 [pid 5672] close(3) = 0 [pid 5672] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5672] write(1, "executing program\n", 18) = 18 executing program [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5672] munmap(0x7f910aff4000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] close(4) = 0 [pid 5672] mkdir("./file1", 0777) = 0 [pid 5672] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5672] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file1") = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [ 127.827570][ T5672] loop0: detected capacity change from 0 to 32768 [pid 5672] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5672] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5672] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5672] close(3) = 0 [pid 5672] close(4) = -1 EBADF (Bad file descriptor) [pid 5672] close(5) = -1 EBADF (Bad file descriptor) [pid 5672] close(6) = -1 EBADF (Bad file descriptor) [pid 5672] close(7) = -1 EBADF (Bad file descriptor) [pid 5672] close(8) = -1 EBADF (Bad file descriptor) [pid 5672] close(9) = -1 EBADF (Bad file descriptor) [pid 5672] close(10) = -1 EBADF (Bad file descriptor) [pid 5672] close(11) = -1 EBADF (Bad file descriptor) [pid 5672] close(12) = -1 EBADF (Bad file descriptor) [pid 5672] close(13) = -1 EBADF (Bad file descriptor) [pid 5672] close(14) = -1 EBADF (Bad file descriptor) [pid 5672] close(15) = -1 EBADF (Bad file descriptor) [pid 5672] close(16) = -1 EBADF (Bad file descriptor) [pid 5672] close(17) = -1 EBADF (Bad file descriptor) [pid 5672] close(18) = -1 EBADF (Bad file descriptor) [pid 5672] close(19) = -1 EBADF (Bad file descriptor) [pid 5672] close(20) = -1 EBADF (Bad file descriptor) [pid 5672] close(21) = -1 EBADF (Bad file descriptor) [pid 5672] close(22) = -1 EBADF (Bad file descriptor) [pid 5672] close(23) = -1 EBADF (Bad file descriptor) [pid 5672] close(24) = -1 EBADF (Bad file descriptor) [pid 5672] close(25) = -1 EBADF (Bad file descriptor) [pid 5672] close(26) = -1 EBADF (Bad file descriptor) [pid 5672] close(27) = -1 EBADF (Bad file descriptor) [pid 5672] close(28) = -1 EBADF (Bad file descriptor) [pid 5672] close(29) = -1 EBADF (Bad file descriptor) [pid 5672] exit_group(0) = ? [ 127.895150][ T5672] ialloc: diAlloc returned -17! [pid 5672] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./31/file1") = 0 [pid 5604] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./31/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./31") = 0 [pid 5604] mkdir("./32", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5673 attached , child_tidptr=0x55558daac6d0) = 35 [pid 5673] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5673] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] chdir("./32") = 0 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5673] write(3, "1000", 4) = 4 [pid 5673] close(3) = 0 [pid 5673] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5673] write(1, "executing program\n", 18) = 18 [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5673] munmap(0x7f910aff4000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5673] close(3) = 0 [pid 5673] close(4) = 0 [pid 5673] mkdir("./file1", 0777) = 0 [pid 5673] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5673] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5673] chdir("./file1") = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5673] ioctl(4, LOOP_CLR_FD) = 0 [pid 5673] close(4) = 0 [ 128.371334][ T5673] loop0: detected capacity change from 0 to 32768 [pid 5673] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5673] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5673] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5673] close(3) = 0 [pid 5673] close(4) = -1 EBADF (Bad file descriptor) [pid 5673] close(5) = -1 EBADF (Bad file descriptor) [pid 5673] close(6) = -1 EBADF (Bad file descriptor) [pid 5673] close(7) = -1 EBADF (Bad file descriptor) [pid 5673] close(8) = -1 EBADF (Bad file descriptor) [pid 5673] close(9) = -1 EBADF (Bad file descriptor) [pid 5673] close(10) = -1 EBADF (Bad file descriptor) [pid 5673] close(11) = -1 EBADF (Bad file descriptor) [pid 5673] close(12) = -1 EBADF (Bad file descriptor) [pid 5673] close(13) = -1 EBADF (Bad file descriptor) [pid 5673] close(14) = -1 EBADF (Bad file descriptor) [pid 5673] close(15) = -1 EBADF (Bad file descriptor) [pid 5673] close(16) = -1 EBADF (Bad file descriptor) [pid 5673] close(17) = -1 EBADF (Bad file descriptor) [pid 5673] close(18) = -1 EBADF (Bad file descriptor) [pid 5673] close(19) = -1 EBADF (Bad file descriptor) [pid 5673] close(20) = -1 EBADF (Bad file descriptor) [pid 5673] close(21) = -1 EBADF (Bad file descriptor) [pid 5673] close(22) = -1 EBADF (Bad file descriptor) [pid 5673] close(23) = -1 EBADF (Bad file descriptor) [pid 5673] close(24) = -1 EBADF (Bad file descriptor) [pid 5673] close(25) = -1 EBADF (Bad file descriptor) [pid 5673] close(26) = -1 EBADF (Bad file descriptor) [pid 5673] close(27) = -1 EBADF (Bad file descriptor) [pid 5673] close(28) = -1 EBADF (Bad file descriptor) [pid 5673] close(29) = -1 EBADF (Bad file descriptor) [pid 5673] exit_group(0) = ? [pid 5673] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 128.424694][ T5673] ialloc: diAlloc returned -17! [pid 5604] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./32/file1") = 0 [pid 5604] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./32/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./32") = 0 [pid 5604] mkdir("./33", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 36 [pid 5674] <... set_robust_list resumed>) = 0 [pid 5674] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] chdir("./33" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] <... chdir resumed>) = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] write(1, "executing program\n", 18) = 18 executing program [pid 5674] memfd_create("syzkaller", 0) = 3 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5674] munmap(0x7f910aff4000, 138412032) = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5674] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5674] close(3) = 0 [pid 5674] close(4) = 0 [pid 5674] mkdir("./file1", 0777) = 0 [pid 5674] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5674] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5674] chdir("./file1") = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5674] ioctl(4, LOOP_CLR_FD) = 0 [pid 5674] close(4) = 0 [pid 5674] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 128.934087][ T5674] loop0: detected capacity change from 0 to 32768 [pid 5674] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5674] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5674] close(3) = 0 [pid 5674] close(4) = -1 EBADF (Bad file descriptor) [pid 5674] close(5) = -1 EBADF (Bad file descriptor) [pid 5674] close(6) = -1 EBADF (Bad file descriptor) [pid 5674] close(7) = -1 EBADF (Bad file descriptor) [pid 5674] close(8) = -1 EBADF (Bad file descriptor) [pid 5674] close(9) = -1 EBADF (Bad file descriptor) [pid 5674] close(10) = -1 EBADF (Bad file descriptor) [pid 5674] close(11) = -1 EBADF (Bad file descriptor) [pid 5674] close(12) = -1 EBADF (Bad file descriptor) [pid 5674] close(13) = -1 EBADF (Bad file descriptor) [pid 5674] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(15) = -1 EBADF (Bad file descriptor) [pid 5674] close(16) = -1 EBADF (Bad file descriptor) [pid 5674] close(17) = -1 EBADF (Bad file descriptor) [pid 5674] close(18) = -1 EBADF (Bad file descriptor) [pid 5674] close(19) = -1 EBADF (Bad file descriptor) [pid 5674] close(20) = -1 EBADF (Bad file descriptor) [pid 5674] close(21) = -1 EBADF (Bad file descriptor) [pid 5674] close(22) = -1 EBADF (Bad file descriptor) [pid 5674] close(23) = -1 EBADF (Bad file descriptor) [pid 5674] close(24) = -1 EBADF (Bad file descriptor) [pid 5674] close(25) = -1 EBADF (Bad file descriptor) [pid 5674] close(26) = -1 EBADF (Bad file descriptor) [pid 5674] close(27) = -1 EBADF (Bad file descriptor) [pid 5674] close(28) = -1 EBADF (Bad file descriptor) [pid 5674] close(29) = -1 EBADF (Bad file descriptor) [pid 5674] exit_group(0) = ? [ 128.974245][ T5674] ialloc: diAlloc returned -17! [pid 5674] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./33/file1") = 0 [pid 5604] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./33/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./33") = 0 [pid 5604] mkdir("./34", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5675 attached [pid 5675] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 37 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5675] chdir("./34") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5675] close(3) = 0 [pid 5675] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5675] write(1, "executing program\n", 18) = 18 [pid 5675] memfd_create("syzkaller", 0) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5675] munmap(0x7f910aff4000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] close(4) = 0 [pid 5675] mkdir("./file1", 0777) = 0 [pid 5675] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5675] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file1") = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5675] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5675] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5675] close(3) = 0 [ 129.483504][ T5675] loop0: detected capacity change from 0 to 32768 [pid 5675] close(4) = -1 EBADF (Bad file descriptor) [pid 5675] close(5) = -1 EBADF (Bad file descriptor) [pid 5675] close(6) = -1 EBADF (Bad file descriptor) [pid 5675] close(7) = -1 EBADF (Bad file descriptor) [pid 5675] close(8) = -1 EBADF (Bad file descriptor) [pid 5675] close(9) = -1 EBADF (Bad file descriptor) [pid 5675] close(10) = -1 EBADF (Bad file descriptor) [pid 5675] close(11) = -1 EBADF (Bad file descriptor) [pid 5675] close(12) = -1 EBADF (Bad file descriptor) [pid 5675] close(13) = -1 EBADF (Bad file descriptor) [pid 5675] close(14) = -1 EBADF (Bad file descriptor) [pid 5675] close(15) = -1 EBADF (Bad file descriptor) [pid 5675] close(16) = -1 EBADF (Bad file descriptor) [pid 5675] close(17) = -1 EBADF (Bad file descriptor) [pid 5675] close(18) = -1 EBADF (Bad file descriptor) [pid 5675] close(19) = -1 EBADF (Bad file descriptor) [pid 5675] close(20) = -1 EBADF (Bad file descriptor) [pid 5675] close(21) = -1 EBADF (Bad file descriptor) [pid 5675] close(22) = -1 EBADF (Bad file descriptor) [pid 5675] close(23) = -1 EBADF (Bad file descriptor) [pid 5675] close(24) = -1 EBADF (Bad file descriptor) [pid 5675] close(25) = -1 EBADF (Bad file descriptor) [pid 5675] close(26) = -1 EBADF (Bad file descriptor) [pid 5675] close(27) = -1 EBADF (Bad file descriptor) [pid 5675] close(28) = -1 EBADF (Bad file descriptor) [pid 5675] close(29) = -1 EBADF (Bad file descriptor) [pid 5675] exit_group(0) = ? [pid 5675] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [ 129.532247][ T5675] ialloc: diAlloc returned -17! [pid 5604] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./34/file1") = 0 [pid 5604] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./34/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./34") = 0 [pid 5604] mkdir("./35", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5676 attached , child_tidptr=0x55558daac6d0) = 38 [pid 5676] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5676] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] chdir("./35") = 0 [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5676] setpgid(0, 0) = 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5676] write(3, "1000", 4) = 4 [pid 5676] close(3) = 0 [pid 5676] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5676] write(1, "executing program\n", 18) = 18 executing program [pid 5676] memfd_create("syzkaller", 0) = 3 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5676] munmap(0x7f910aff4000, 138412032) = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5676] close(3) = 0 [pid 5676] close(4) = 0 [pid 5676] mkdir("./file1", 0777) = 0 [pid 5676] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5676] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5676] chdir("./file1") = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5676] ioctl(4, LOOP_CLR_FD) = 0 [pid 5676] close(4) = 0 [ 130.036068][ T5676] loop0: detected capacity change from 0 to 32768 [pid 5676] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5676] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5676] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5676] close(3) = 0 [pid 5676] close(4) = -1 EBADF (Bad file descriptor) [pid 5676] close(5) = -1 EBADF (Bad file descriptor) [pid 5676] close(6) = -1 EBADF (Bad file descriptor) [pid 5676] close(7) = -1 EBADF (Bad file descriptor) [pid 5676] close(8) = -1 EBADF (Bad file descriptor) [pid 5676] close(9) = -1 EBADF (Bad file descriptor) [pid 5676] close(10) = -1 EBADF (Bad file descriptor) [pid 5676] close(11) = -1 EBADF (Bad file descriptor) [pid 5676] close(12) = -1 EBADF (Bad file descriptor) [pid 5676] close(13) = -1 EBADF (Bad file descriptor) [pid 5676] close(14) = -1 EBADF (Bad file descriptor) [pid 5676] close(15) = -1 EBADF (Bad file descriptor) [pid 5676] close(16) = -1 EBADF (Bad file descriptor) [pid 5676] close(17) = -1 EBADF (Bad file descriptor) [pid 5676] close(18) = -1 EBADF (Bad file descriptor) [pid 5676] close(19) = -1 EBADF (Bad file descriptor) [pid 5676] close(20) = -1 EBADF (Bad file descriptor) [pid 5676] close(21) = -1 EBADF (Bad file descriptor) [pid 5676] close(22) = -1 EBADF (Bad file descriptor) [pid 5676] close(23) = -1 EBADF (Bad file descriptor) [pid 5676] close(24) = -1 EBADF (Bad file descriptor) [pid 5676] close(25) = -1 EBADF (Bad file descriptor) [pid 5676] close(26) = -1 EBADF (Bad file descriptor) [pid 5676] close(27) = -1 EBADF (Bad file descriptor) [pid 5676] close(28) = -1 EBADF (Bad file descriptor) [pid 5676] close(29) = -1 EBADF (Bad file descriptor) [pid 5676] exit_group(0) = ? [ 130.109963][ T5676] ialloc: diAlloc returned -17! [pid 5676] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./35/file1") = 0 [pid 5604] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./35/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./35") = 0 [pid 5604] mkdir("./36", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5677 attached [pid 5677] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 39 [pid 5677] <... set_robust_list resumed>) = 0 [pid 5677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5677] chdir("./36" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] <... chdir resumed>) = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] write(1, "executing program\n", 18) = 18 executing program [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5677] munmap(0x7f910aff4000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5677] close(3) = 0 [pid 5677] close(4) = 0 [pid 5677] mkdir("./file1", 0777) = 0 [pid 5677] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5677] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file1") = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5677] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5677] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5677] close(3) = 0 [pid 5677] close(4) = -1 EBADF (Bad file descriptor) [pid 5677] close(5) = -1 EBADF (Bad file descriptor) [pid 5677] close(6) = -1 EBADF (Bad file descriptor) [pid 5677] close(7) = -1 EBADF (Bad file descriptor) [ 130.650577][ T5677] loop0: detected capacity change from 0 to 32768 [pid 5677] close(8) = -1 EBADF (Bad file descriptor) [pid 5677] close(9) = -1 EBADF (Bad file descriptor) [pid 5677] close(10) = -1 EBADF (Bad file descriptor) [pid 5677] close(11) = -1 EBADF (Bad file descriptor) [pid 5677] close(12) = -1 EBADF (Bad file descriptor) [pid 5677] close(13) = -1 EBADF (Bad file descriptor) [pid 5677] close(14) = -1 EBADF (Bad file descriptor) [pid 5677] close(15) = -1 EBADF (Bad file descriptor) [pid 5677] close(16) = -1 EBADF (Bad file descriptor) [pid 5677] close(17) = -1 EBADF (Bad file descriptor) [pid 5677] close(18) = -1 EBADF (Bad file descriptor) [pid 5677] close(19) = -1 EBADF (Bad file descriptor) [pid 5677] close(20) = -1 EBADF (Bad file descriptor) [pid 5677] close(21) = -1 EBADF (Bad file descriptor) [pid 5677] close(22) = -1 EBADF (Bad file descriptor) [pid 5677] close(23) = -1 EBADF (Bad file descriptor) [pid 5677] close(24) = -1 EBADF (Bad file descriptor) [pid 5677] close(25) = -1 EBADF (Bad file descriptor) [pid 5677] close(26) = -1 EBADF (Bad file descriptor) [pid 5677] close(27) = -1 EBADF (Bad file descriptor) [pid 5677] close(28) = -1 EBADF (Bad file descriptor) [pid 5677] close(29) = -1 EBADF (Bad file descriptor) [ 130.695336][ T5677] ialloc: diAlloc returned -17! [pid 5677] exit_group(0) = ? [pid 5677] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./36/file1") = 0 [pid 5604] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./36/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./36") = 0 [pid 5604] mkdir("./37", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5678 attached [pid 5678] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 40 [pid 5678] <... set_robust_list resumed>) = 0 [pid 5678] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5678] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] chdir("./37") = 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5678] setpgid(0, 0) = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5678] write(3, "1000", 4) = 4 [pid 5678] close(3) = 0 [pid 5678] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5678] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5678] write(1, "executing program\n", 18) = 18 [pid 5678] memfd_create("syzkaller", 0) = 3 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5678] munmap(0x7f910aff4000, 138412032) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5678] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5678] close(3) = 0 [pid 5678] close(4) = 0 [pid 5678] mkdir("./file1", 0777) = 0 [pid 5678] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5678] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5678] chdir("./file1") = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5678] ioctl(4, LOOP_CLR_FD) = 0 [pid 5678] close(4) = 0 [ 131.200680][ T5678] loop0: detected capacity change from 0 to 32768 [pid 5678] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5678] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5678] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5678] close(3) = 0 [pid 5678] close(4) = -1 EBADF (Bad file descriptor) [pid 5678] close(5) = -1 EBADF (Bad file descriptor) [pid 5678] close(6) = -1 EBADF (Bad file descriptor) [pid 5678] close(7) = -1 EBADF (Bad file descriptor) [pid 5678] close(8) = -1 EBADF (Bad file descriptor) [pid 5678] close(9) = -1 EBADF (Bad file descriptor) [pid 5678] close(10) = -1 EBADF (Bad file descriptor) [pid 5678] close(11) = -1 EBADF (Bad file descriptor) [pid 5678] close(12) = -1 EBADF (Bad file descriptor) [pid 5678] close(13) = -1 EBADF (Bad file descriptor) [pid 5678] close(14) = -1 EBADF (Bad file descriptor) [pid 5678] close(15) = -1 EBADF (Bad file descriptor) [pid 5678] close(16) = -1 EBADF (Bad file descriptor) [pid 5678] close(17) = -1 EBADF (Bad file descriptor) [ 131.268623][ T5678] ialloc: diAlloc returned -17! [pid 5678] close(18) = -1 EBADF (Bad file descriptor) [pid 5678] close(19) = -1 EBADF (Bad file descriptor) [pid 5678] close(20) = -1 EBADF (Bad file descriptor) [pid 5678] close(21) = -1 EBADF (Bad file descriptor) [pid 5678] close(22) = -1 EBADF (Bad file descriptor) [pid 5678] close(23) = -1 EBADF (Bad file descriptor) [pid 5678] close(24) = -1 EBADF (Bad file descriptor) [pid 5678] close(25) = -1 EBADF (Bad file descriptor) [pid 5678] close(26) = -1 EBADF (Bad file descriptor) [pid 5678] close(27) = -1 EBADF (Bad file descriptor) [pid 5678] close(28) = -1 EBADF (Bad file descriptor) [pid 5678] close(29) = -1 EBADF (Bad file descriptor) [pid 5678] exit_group(0) = ? [pid 5678] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./37/file1") = 0 [pid 5604] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./37/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./37") = 0 [pid 5604] mkdir("./38", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5679 attached [pid 5679] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 41 [pid 5679] <... set_robust_list resumed>) = 0 [pid 5679] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5679] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5679] chdir("./38") = 0 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5679] setpgid(0, 0) = 0 [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5679] write(3, "1000", 4) = 4 [pid 5679] close(3) = 0 [pid 5679] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5679] write(1, "executing program\n", 18) = 18 executing program [pid 5679] memfd_create("syzkaller", 0) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5679] munmap(0x7f910aff4000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5679] close(3) = 0 [pid 5679] close(4) = 0 [pid 5679] mkdir("./file1", 0777) = 0 [pid 5679] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5679] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5679] chdir("./file1") = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5679] ioctl(4, LOOP_CLR_FD) = 0 [pid 5679] close(4) = 0 [pid 5679] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5679] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5679] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5679] close(3) = 0 [pid 5679] close(4) = -1 EBADF (Bad file descriptor) [pid 5679] close(5) = -1 EBADF (Bad file descriptor) [pid 5679] close(6) = -1 EBADF (Bad file descriptor) [pid 5679] close(7) = -1 EBADF (Bad file descriptor) [pid 5679] close(8) = -1 EBADF (Bad file descriptor) [pid 5679] close(9) = -1 EBADF (Bad file descriptor) [pid 5679] close(10) = -1 EBADF (Bad file descriptor) [pid 5679] close(11) = -1 EBADF (Bad file descriptor) [pid 5679] close(12) = -1 EBADF (Bad file descriptor) [pid 5679] close(13) = -1 EBADF (Bad file descriptor) [pid 5679] close(14) = -1 EBADF (Bad file descriptor) [pid 5679] close(15) = -1 EBADF (Bad file descriptor) [pid 5679] close(16) = -1 EBADF (Bad file descriptor) [pid 5679] close(17) = -1 EBADF (Bad file descriptor) [pid 5679] close(18) = -1 EBADF (Bad file descriptor) [pid 5679] close(19) = -1 EBADF (Bad file descriptor) [pid 5679] close(20) = -1 EBADF (Bad file descriptor) [pid 5679] close(21) = -1 EBADF (Bad file descriptor) [pid 5679] close(22) = -1 EBADF (Bad file descriptor) [pid 5679] close(23) = -1 EBADF (Bad file descriptor) [pid 5679] close(24) = -1 EBADF (Bad file descriptor) [pid 5679] close(25) = -1 EBADF (Bad file descriptor) [pid 5679] close(26) = -1 EBADF (Bad file descriptor) [pid 5679] close(27) = -1 EBADF (Bad file descriptor) [ 131.810736][ T5679] loop0: detected capacity change from 0 to 32768 [ 131.846432][ T5679] ialloc: diAlloc returned -17! [pid 5679] close(28) = -1 EBADF (Bad file descriptor) [pid 5679] close(29) = -1 EBADF (Bad file descriptor) [pid 5679] exit_group(0) = ? [pid 5679] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./38/file1") = 0 [pid 5604] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./38/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./38") = 0 [pid 5604] mkdir("./39", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5680 attached [pid 5680] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 42 [pid 5680] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5680] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5680] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5680] chdir("./39") = 0 [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5680] setpgid(0, 0) = 0 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5680] write(3, "1000", 4) = 4 [pid 5680] close(3) = 0 [pid 5680] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5680] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5680] write(1, "executing program\n", 18) = 18 [pid 5680] memfd_create("syzkaller", 0) = 3 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5680] munmap(0x7f910aff4000, 138412032) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5680] close(3) = 0 [pid 5680] close(4) = 0 [pid 5680] mkdir("./file1", 0777) = 0 [pid 5680] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5680] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5680] chdir("./file1") = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5680] ioctl(4, LOOP_CLR_FD) = 0 [pid 5680] close(4) = 0 [ 132.318900][ T5680] loop0: detected capacity change from 0 to 32768 [pid 5680] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5680] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5680] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5680] close(3) = 0 [pid 5680] close(4) = -1 EBADF (Bad file descriptor) [pid 5680] close(5) = -1 EBADF (Bad file descriptor) [pid 5680] close(6) = -1 EBADF (Bad file descriptor) [pid 5680] close(7) = -1 EBADF (Bad file descriptor) [pid 5680] close(8) = -1 EBADF (Bad file descriptor) [pid 5680] close(9) = -1 EBADF (Bad file descriptor) [pid 5680] close(10) = -1 EBADF (Bad file descriptor) [pid 5680] close(11) = -1 EBADF (Bad file descriptor) [pid 5680] close(12) = -1 EBADF (Bad file descriptor) [pid 5680] close(13) = -1 EBADF (Bad file descriptor) [pid 5680] close(14) = -1 EBADF (Bad file descriptor) [pid 5680] close(15) = -1 EBADF (Bad file descriptor) [pid 5680] close(16) = -1 EBADF (Bad file descriptor) [pid 5680] close(17) = -1 EBADF (Bad file descriptor) [pid 5680] close(18) = -1 EBADF (Bad file descriptor) [pid 5680] close(19) = -1 EBADF (Bad file descriptor) [pid 5680] close(20) = -1 EBADF (Bad file descriptor) [pid 5680] close(21) = -1 EBADF (Bad file descriptor) [pid 5680] close(22) = -1 EBADF (Bad file descriptor) [ 132.389217][ T5680] ialloc: diAlloc returned -17! [pid 5680] close(23) = -1 EBADF (Bad file descriptor) [pid 5680] close(24) = -1 EBADF (Bad file descriptor) [pid 5680] close(25) = -1 EBADF (Bad file descriptor) [pid 5680] close(26) = -1 EBADF (Bad file descriptor) [pid 5680] close(27) = -1 EBADF (Bad file descriptor) [pid 5680] close(28) = -1 EBADF (Bad file descriptor) [pid 5680] close(29) = -1 EBADF (Bad file descriptor) [pid 5680] exit_group(0) = ? [pid 5680] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./39/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./39/file1") = 0 [pid 5604] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./39/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./39") = 0 [pid 5604] mkdir("./40", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5681 attached , child_tidptr=0x55558daac6d0) = 43 [pid 5681] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5681] chdir("./40") = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5681] write(1, "executing program\n", 18) = 18 [pid 5681] memfd_create("syzkaller", 0) = 3 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5681] munmap(0x7f910aff4000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5681] close(3) = 0 [pid 5681] close(4) = 0 [pid 5681] mkdir("./file1", 0777) = 0 [pid 5681] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5681] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5681] chdir("./file1") = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5681] ioctl(4, LOOP_CLR_FD) = 0 [pid 5681] close(4) = 0 [pid 5681] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [ 132.854902][ T5681] loop0: detected capacity change from 0 to 32768 [pid 5681] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5681] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5681] close(3) = 0 [pid 5681] close(4) = -1 EBADF (Bad file descriptor) [pid 5681] close(5) = -1 EBADF (Bad file descriptor) [pid 5681] close(6) = -1 EBADF (Bad file descriptor) [pid 5681] close(7) = -1 EBADF (Bad file descriptor) [pid 5681] close(8) = -1 EBADF (Bad file descriptor) [pid 5681] close(9) = -1 EBADF (Bad file descriptor) [pid 5681] close(10) = -1 EBADF (Bad file descriptor) [pid 5681] close(11) = -1 EBADF (Bad file descriptor) [pid 5681] close(12) = -1 EBADF (Bad file descriptor) [pid 5681] close(13) = -1 EBADF (Bad file descriptor) [pid 5681] close(14) = -1 EBADF (Bad file descriptor) [pid 5681] close(15) = -1 EBADF (Bad file descriptor) [pid 5681] close(16) = -1 EBADF (Bad file descriptor) [pid 5681] close(17) = -1 EBADF (Bad file descriptor) [pid 5681] close(18) = -1 EBADF (Bad file descriptor) [pid 5681] close(19) = -1 EBADF (Bad file descriptor) [pid 5681] close(20) = -1 EBADF (Bad file descriptor) [pid 5681] close(21) = -1 EBADF (Bad file descriptor) [pid 5681] close(22) = -1 EBADF (Bad file descriptor) [pid 5681] close(23) = -1 EBADF (Bad file descriptor) [pid 5681] close(24) = -1 EBADF (Bad file descriptor) [pid 5681] close(25) = -1 EBADF (Bad file descriptor) [pid 5681] close(26) = -1 EBADF (Bad file descriptor) [pid 5681] close(27) = -1 EBADF (Bad file descriptor) [pid 5681] close(28) = -1 EBADF (Bad file descriptor) [pid 5681] close(29) = -1 EBADF (Bad file descriptor) [pid 5681] exit_group(0) = ? [pid 5681] +++ exited with 0 +++ [ 132.909274][ T5681] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./40/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./40/file1") = 0 [pid 5604] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./40/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./40") = 0 [pid 5604] mkdir("./41", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5682 attached [pid 5682] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 44 [pid 5682] <... set_robust_list resumed>) = 0 [pid 5682] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5682] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5682] chdir("./41") = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5682] write(3, "1000", 4) = 4 [pid 5682] close(3) = 0 [pid 5682] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5682] write(1, "executing program\n", 18) = 18 executing program [pid 5682] memfd_create("syzkaller", 0) = 3 [pid 5682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5682] munmap(0x7f910aff4000, 138412032) = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5682] close(3) = 0 [pid 5682] close(4) = 0 [pid 5682] mkdir("./file1", 0777) = 0 [pid 5682] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5682] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5682] chdir("./file1") = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5682] ioctl(4, LOOP_CLR_FD) = 0 [pid 5682] close(4) = 0 [pid 5682] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5682] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5682] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5682] close(3) = 0 [pid 5682] close(4) = -1 EBADF (Bad file descriptor) [pid 5682] close(5) = -1 EBADF (Bad file descriptor) [pid 5682] close(6) = -1 EBADF (Bad file descriptor) [pid 5682] close(7) = -1 EBADF (Bad file descriptor) [pid 5682] close(8) = -1 EBADF (Bad file descriptor) [pid 5682] close(9) = -1 EBADF (Bad file descriptor) [pid 5682] close(10) = -1 EBADF (Bad file descriptor) [pid 5682] close(11) = -1 EBADF (Bad file descriptor) [pid 5682] close(12) = -1 EBADF (Bad file descriptor) [pid 5682] close(13) = -1 EBADF (Bad file descriptor) [pid 5682] close(14) = -1 EBADF (Bad file descriptor) [pid 5682] close(15) = -1 EBADF (Bad file descriptor) [pid 5682] close(16) = -1 EBADF (Bad file descriptor) [pid 5682] close(17) = -1 EBADF (Bad file descriptor) [pid 5682] close(18) = -1 EBADF (Bad file descriptor) [pid 5682] close(19) = -1 EBADF (Bad file descriptor) [pid 5682] close(20) = -1 EBADF (Bad file descriptor) [ 133.406395][ T5682] loop0: detected capacity change from 0 to 32768 [ 133.448730][ T5682] ialloc: diAlloc returned -17! [pid 5682] close(21) = -1 EBADF (Bad file descriptor) [pid 5682] close(22) = -1 EBADF (Bad file descriptor) [pid 5682] close(23) = -1 EBADF (Bad file descriptor) [pid 5682] close(24) = -1 EBADF (Bad file descriptor) [pid 5682] close(25) = -1 EBADF (Bad file descriptor) [pid 5682] close(26) = -1 EBADF (Bad file descriptor) [pid 5682] close(27) = -1 EBADF (Bad file descriptor) [pid 5682] close(28) = -1 EBADF (Bad file descriptor) [pid 5682] close(29) = -1 EBADF (Bad file descriptor) [pid 5682] exit_group(0) = ? [pid 5682] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./41/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./41/file1") = 0 [pid 5604] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./41/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./41") = 0 [pid 5604] mkdir("./42", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5683 attached [pid 5683] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 45 [pid 5683] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5683] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5683] chdir("./42") = 0 [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5683] setpgid(0, 0) = 0 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5683] write(3, "1000", 4) = 4 [pid 5683] close(3) = 0 [pid 5683] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5683] write(1, "executing program\n", 18) = 18 executing program [pid 5683] memfd_create("syzkaller", 0) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5683] munmap(0x7f910aff4000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5683] close(3) = 0 [pid 5683] close(4) = 0 [pid 5683] mkdir("./file1", 0777) = 0 [pid 5683] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5683] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5683] chdir("./file1") = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5683] ioctl(4, LOOP_CLR_FD) = 0 [pid 5683] close(4) = 0 [pid 5683] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5683] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 133.980387][ T5683] loop0: detected capacity change from 0 to 32768 [pid 5683] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5683] close(3) = 0 [pid 5683] close(4) = -1 EBADF (Bad file descriptor) [pid 5683] close(5) = -1 EBADF (Bad file descriptor) [pid 5683] close(6) = -1 EBADF (Bad file descriptor) [pid 5683] close(7) = -1 EBADF (Bad file descriptor) [pid 5683] close(8) = -1 EBADF (Bad file descriptor) [pid 5683] close(9) = -1 EBADF (Bad file descriptor) [pid 5683] close(10) = -1 EBADF (Bad file descriptor) [pid 5683] close(11) = -1 EBADF (Bad file descriptor) [pid 5683] close(12) = -1 EBADF (Bad file descriptor) [pid 5683] close(13) = -1 EBADF (Bad file descriptor) [pid 5683] close(14) = -1 EBADF (Bad file descriptor) [pid 5683] close(15) = -1 EBADF (Bad file descriptor) [pid 5683] close(16) = -1 EBADF (Bad file descriptor) [pid 5683] close(17) = -1 EBADF (Bad file descriptor) [pid 5683] close(18) = -1 EBADF (Bad file descriptor) [pid 5683] close(19) = -1 EBADF (Bad file descriptor) [pid 5683] close(20) = -1 EBADF (Bad file descriptor) [pid 5683] close(21) = -1 EBADF (Bad file descriptor) [pid 5683] close(22) = -1 EBADF (Bad file descriptor) [pid 5683] close(23) = -1 EBADF (Bad file descriptor) [pid 5683] close(24) = -1 EBADF (Bad file descriptor) [pid 5683] close(25) = -1 EBADF (Bad file descriptor) [pid 5683] close(26) = -1 EBADF (Bad file descriptor) [pid 5683] close(27) = -1 EBADF (Bad file descriptor) [pid 5683] close(28) = -1 EBADF (Bad file descriptor) [pid 5683] close(29) = -1 EBADF (Bad file descriptor) [pid 5683] exit_group(0) = ? [pid 5683] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [ 134.031571][ T5683] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./42/file1") = 0 [pid 5604] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./42/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./42") = 0 [pid 5604] mkdir("./43", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5685 attached , child_tidptr=0x55558daac6d0) = 46 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5685] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5685] <... set_robust_list resumed>) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] chdir("./43") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5685] write(1, "executing program\n", 18) = 18 executing program [pid 5685] memfd_create("syzkaller", 0) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5685] munmap(0x7f910aff4000, 138412032) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5685] close(3) = 0 [pid 5685] close(4) = 0 [pid 5685] mkdir("./file1", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5685] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file1") = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [ 134.533838][ T5685] loop0: detected capacity change from 0 to 32768 [pid 5685] close(4) = 0 [pid 5685] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5685] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5685] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5685] close(3) = 0 [pid 5685] close(4) = -1 EBADF (Bad file descriptor) [pid 5685] close(5) = -1 EBADF (Bad file descriptor) [pid 5685] close(6) = -1 EBADF (Bad file descriptor) [pid 5685] close(7) = -1 EBADF (Bad file descriptor) [pid 5685] close(8) = -1 EBADF (Bad file descriptor) [pid 5685] close(9) = -1 EBADF (Bad file descriptor) [pid 5685] close(10) = -1 EBADF (Bad file descriptor) [pid 5685] close(11) = -1 EBADF (Bad file descriptor) [pid 5685] close(12) = -1 EBADF (Bad file descriptor) [pid 5685] close(13) = -1 EBADF (Bad file descriptor) [pid 5685] close(14) = -1 EBADF (Bad file descriptor) [pid 5685] close(15) = -1 EBADF (Bad file descriptor) [pid 5685] close(16) = -1 EBADF (Bad file descriptor) [pid 5685] close(17) = -1 EBADF (Bad file descriptor) [pid 5685] close(18) = -1 EBADF (Bad file descriptor) [pid 5685] close(19) = -1 EBADF (Bad file descriptor) [pid 5685] close(20) = -1 EBADF (Bad file descriptor) [pid 5685] close(21) = -1 EBADF (Bad file descriptor) [pid 5685] close(22) = -1 EBADF (Bad file descriptor) [pid 5685] close(23) = -1 EBADF (Bad file descriptor) [pid 5685] close(24) = -1 EBADF (Bad file descriptor) [pid 5685] close(25) = -1 EBADF (Bad file descriptor) [pid 5685] close(26) = -1 EBADF (Bad file descriptor) [pid 5685] close(27) = -1 EBADF (Bad file descriptor) [pid 5685] close(28) = -1 EBADF (Bad file descriptor) [pid 5685] close(29) = -1 EBADF (Bad file descriptor) [pid 5685] exit_group(0) = ? [pid 5685] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [ 134.597928][ T5685] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./43/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./43/file1") = 0 [pid 5604] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./43/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./43") = 0 [pid 5604] mkdir("./44", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5686 attached [pid 5686] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 47 [pid 5686] <... set_robust_list resumed>) = 0 [pid 5686] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5686] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] chdir("./44" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] <... chdir resumed>) = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5686] write(1, "executing program\n", 18) = 18 executing program [pid 5686] memfd_create("syzkaller", 0) = 3 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5686] munmap(0x7f910aff4000, 138412032) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5686] close(3) = 0 [pid 5686] close(4) = 0 [pid 5686] mkdir("./file1", 0777) = 0 [pid 5686] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5686] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5686] chdir("./file1") = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5686] ioctl(4, LOOP_CLR_FD) = 0 [pid 5686] close(4) = 0 [pid 5686] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5686] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5686] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5686] close(3) = 0 [pid 5686] close(4) = -1 EBADF (Bad file descriptor) [pid 5686] close(5) = -1 EBADF (Bad file descriptor) [pid 5686] close(6) = -1 EBADF (Bad file descriptor) [pid 5686] close(7) = -1 EBADF (Bad file descriptor) [pid 5686] close(8) = -1 EBADF (Bad file descriptor) [pid 5686] close(9) = -1 EBADF (Bad file descriptor) [pid 5686] close(10) = -1 EBADF (Bad file descriptor) [pid 5686] close(11) = -1 EBADF (Bad file descriptor) [pid 5686] close(12) = -1 EBADF (Bad file descriptor) [pid 5686] close(13) = -1 EBADF (Bad file descriptor) [pid 5686] close(14) = -1 EBADF (Bad file descriptor) [pid 5686] close(15) = -1 EBADF (Bad file descriptor) [pid 5686] close(16) = -1 EBADF (Bad file descriptor) [pid 5686] close(17) = -1 EBADF (Bad file descriptor) [pid 5686] close(18) = -1 EBADF (Bad file descriptor) [pid 5686] close(19) = -1 EBADF (Bad file descriptor) [pid 5686] close(20) = -1 EBADF (Bad file descriptor) [pid 5686] close(21) = -1 EBADF (Bad file descriptor) [pid 5686] close(22) = -1 EBADF (Bad file descriptor) [pid 5686] close(23) = -1 EBADF (Bad file descriptor) [pid 5686] close(24) = -1 EBADF (Bad file descriptor) [pid 5686] close(25) = -1 EBADF (Bad file descriptor) [pid 5686] close(26) = -1 EBADF (Bad file descriptor) [pid 5686] close(27) = -1 EBADF (Bad file descriptor) [pid 5686] close(28) = -1 EBADF (Bad file descriptor) [pid 5686] close(29) = -1 EBADF (Bad file descriptor) [pid 5686] exit_group(0) = ? [pid 5686] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [ 135.117305][ T5686] loop0: detected capacity change from 0 to 32768 [ 135.153745][ T5686] ialloc: diAlloc returned -17! [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./44/file1") = 0 [pid 5604] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./44/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./44") = 0 [pid 5604] mkdir("./45", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5689 attached [pid 5689] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 48 [pid 5689] <... set_robust_list resumed>) = 0 [pid 5689] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5689] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5689] chdir("./45") = 0 [pid 5689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5689] setpgid(0, 0) = 0 [pid 5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5689] write(3, "1000", 4) = 4 [pid 5689] close(3) = 0 [pid 5689] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5689] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5689] write(1, "executing program\n", 18) = 18 [pid 5689] memfd_create("syzkaller", 0) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5689] munmap(0x7f910aff4000, 138412032) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5689] close(3) = 0 [pid 5689] close(4) = 0 [pid 5689] mkdir("./file1", 0777) = 0 [pid 5689] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5689] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5689] chdir("./file1") = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5689] ioctl(4, LOOP_CLR_FD) = 0 [pid 5689] close(4) = 0 [pid 5689] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5689] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5689] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5689] close(3) = 0 [pid 5689] close(4) = -1 EBADF (Bad file descriptor) [ 135.690617][ T5689] loop0: detected capacity change from 0 to 32768 [pid 5689] close(5) = -1 EBADF (Bad file descriptor) [pid 5689] close(6) = -1 EBADF (Bad file descriptor) [pid 5689] close(7) = -1 EBADF (Bad file descriptor) [pid 5689] close(8) = -1 EBADF (Bad file descriptor) [pid 5689] close(9) = -1 EBADF (Bad file descriptor) [pid 5689] close(10) = -1 EBADF (Bad file descriptor) [pid 5689] close(11) = -1 EBADF (Bad file descriptor) [pid 5689] close(12) = -1 EBADF (Bad file descriptor) [pid 5689] close(13) = -1 EBADF (Bad file descriptor) [pid 5689] close(14) = -1 EBADF (Bad file descriptor) [pid 5689] close(15) = -1 EBADF (Bad file descriptor) [pid 5689] close(16) = -1 EBADF (Bad file descriptor) [pid 5689] close(17) = -1 EBADF (Bad file descriptor) [pid 5689] close(18) = -1 EBADF (Bad file descriptor) [pid 5689] close(19) = -1 EBADF (Bad file descriptor) [pid 5689] close(20) = -1 EBADF (Bad file descriptor) [pid 5689] close(21) = -1 EBADF (Bad file descriptor) [ 135.739072][ T5689] ialloc: diAlloc returned -17! [pid 5689] close(22) = -1 EBADF (Bad file descriptor) [pid 5689] close(23) = -1 EBADF (Bad file descriptor) [pid 5689] close(24) = -1 EBADF (Bad file descriptor) [pid 5689] close(25) = -1 EBADF (Bad file descriptor) [pid 5689] close(26) = -1 EBADF (Bad file descriptor) [pid 5689] close(27) = -1 EBADF (Bad file descriptor) [pid 5689] close(28) = -1 EBADF (Bad file descriptor) [pid 5689] close(29) = -1 EBADF (Bad file descriptor) [pid 5689] exit_group(0) = ? [pid 5689] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./45/file1") = 0 [pid 5604] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./45/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./45") = 0 [pid 5604] mkdir("./46", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5691 attached , child_tidptr=0x55558daac6d0) = 49 [pid 5691] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] <... set_robust_list resumed>) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] chdir("./46") = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] write(1, "executing program\n", 18) = 18 executing program [pid 5691] memfd_create("syzkaller", 0) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5691] munmap(0x7f910aff4000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5691] close(3) = 0 [pid 5691] close(4) = 0 [pid 5691] mkdir("./file1", 0777) = 0 [pid 5691] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5691] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5691] chdir("./file1") = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5691] ioctl(4, LOOP_CLR_FD) = 0 [pid 5691] close(4) = 0 [pid 5691] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5691] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 136.299112][ T5691] loop0: detected capacity change from 0 to 32768 [pid 5691] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5691] close(3) = 0 [pid 5691] close(4) = -1 EBADF (Bad file descriptor) [pid 5691] close(5) = -1 EBADF (Bad file descriptor) [pid 5691] close(6) = -1 EBADF (Bad file descriptor) [pid 5691] close(7) = -1 EBADF (Bad file descriptor) [pid 5691] close(8) = -1 EBADF (Bad file descriptor) [pid 5691] close(9) = -1 EBADF (Bad file descriptor) [pid 5691] close(10) = -1 EBADF (Bad file descriptor) [pid 5691] close(11) = -1 EBADF (Bad file descriptor) [pid 5691] close(12) = -1 EBADF (Bad file descriptor) [pid 5691] close(13) = -1 EBADF (Bad file descriptor) [pid 5691] close(14) = -1 EBADF (Bad file descriptor) [pid 5691] close(15) = -1 EBADF (Bad file descriptor) [pid 5691] close(16) = -1 EBADF (Bad file descriptor) [pid 5691] close(17) = -1 EBADF (Bad file descriptor) [pid 5691] close(18) = -1 EBADF (Bad file descriptor) [pid 5691] close(19) = -1 EBADF (Bad file descriptor) [pid 5691] close(20) = -1 EBADF (Bad file descriptor) [pid 5691] close(21) = -1 EBADF (Bad file descriptor) [pid 5691] close(22) = -1 EBADF (Bad file descriptor) [pid 5691] close(23) = -1 EBADF (Bad file descriptor) [pid 5691] close(24) = -1 EBADF (Bad file descriptor) [pid 5691] close(25) = -1 EBADF (Bad file descriptor) [pid 5691] close(26) = -1 EBADF (Bad file descriptor) [pid 5691] close(27) = -1 EBADF (Bad file descriptor) [pid 5691] close(28) = -1 EBADF (Bad file descriptor) [pid 5691] close(29) = -1 EBADF (Bad file descriptor) [pid 5691] exit_group(0) = ? [pid 5691] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [ 136.350560][ T5691] ialloc: diAlloc returned -17! [pid 5604] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./46/file1") = 0 [pid 5604] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./46/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./46") = 0 [pid 5604] mkdir("./47", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5693 attached , child_tidptr=0x55558daac6d0) = 50 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5693] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5693] chdir("./47") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] write(1, "executing program\n", 18) = 18 executing program [pid 5693] memfd_create("syzkaller", 0) = 3 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5693] munmap(0x7f910aff4000, 138412032) = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5693] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5693] close(3) = 0 [pid 5693] close(4) = 0 [pid 5693] mkdir("./file1", 0777) = 0 [pid 5693] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5693] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5693] chdir("./file1") = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5693] ioctl(4, LOOP_CLR_FD) = 0 [pid 5693] close(4) = 0 [pid 5693] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5693] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5693] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5693] close(3) = 0 [ 136.829681][ T5693] loop0: detected capacity change from 0 to 32768 [pid 5693] close(4) = -1 EBADF (Bad file descriptor) [pid 5693] close(5) = -1 EBADF (Bad file descriptor) [pid 5693] close(6) = -1 EBADF (Bad file descriptor) [pid 5693] close(7) = -1 EBADF (Bad file descriptor) [pid 5693] close(8) = -1 EBADF (Bad file descriptor) [pid 5693] close(9) = -1 EBADF (Bad file descriptor) [pid 5693] close(10) = -1 EBADF (Bad file descriptor) [pid 5693] close(11) = -1 EBADF (Bad file descriptor) [pid 5693] close(12) = -1 EBADF (Bad file descriptor) [pid 5693] close(13) = -1 EBADF (Bad file descriptor) [pid 5693] close(14) = -1 EBADF (Bad file descriptor) [pid 5693] close(15) = -1 EBADF (Bad file descriptor) [pid 5693] close(16) = -1 EBADF (Bad file descriptor) [pid 5693] close(17) = -1 EBADF (Bad file descriptor) [pid 5693] close(18) = -1 EBADF (Bad file descriptor) [ 136.888324][ T5693] ialloc: diAlloc returned -17! [pid 5693] close(19) = -1 EBADF (Bad file descriptor) [pid 5693] close(20) = -1 EBADF (Bad file descriptor) [pid 5693] close(21) = -1 EBADF (Bad file descriptor) [pid 5693] close(22) = -1 EBADF (Bad file descriptor) [pid 5693] close(23) = -1 EBADF (Bad file descriptor) [pid 5693] close(24) = -1 EBADF (Bad file descriptor) [pid 5693] close(25) = -1 EBADF (Bad file descriptor) [pid 5693] close(26) = -1 EBADF (Bad file descriptor) [pid 5693] close(27) = -1 EBADF (Bad file descriptor) [pid 5693] close(28) = -1 EBADF (Bad file descriptor) [pid 5693] close(29) = -1 EBADF (Bad file descriptor) [pid 5693] exit_group(0) = ? [pid 5693] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./47/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./47/file1") = 0 [pid 5604] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./47/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./47") = 0 [pid 5604] mkdir("./48", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5695 attached , child_tidptr=0x55558daac6d0) = 51 [pid 5695] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5695] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5695] chdir("./48") = 0 [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5695] setpgid(0, 0) = 0 [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5695] write(3, "1000", 4) = 4 [pid 5695] close(3) = 0 executing program [pid 5695] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5695] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5695] write(1, "executing program\n", 18) = 18 [pid 5695] memfd_create("syzkaller", 0) = 3 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5695] munmap(0x7f910aff4000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5695] close(3) = 0 [pid 5695] close(4) = 0 [pid 5695] mkdir("./file1", 0777) = 0 [pid 5695] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file1") = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5695] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5695] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5695] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5695] close(3) = 0 [pid 5695] close(4) = -1 EBADF (Bad file descriptor) [pid 5695] close(5) = -1 EBADF (Bad file descriptor) [pid 5695] close(6) = -1 EBADF (Bad file descriptor) [pid 5695] close(7) = -1 EBADF (Bad file descriptor) [pid 5695] close(8) = -1 EBADF (Bad file descriptor) [pid 5695] close(9) = -1 EBADF (Bad file descriptor) [ 137.462276][ T5695] loop0: detected capacity change from 0 to 32768 [pid 5695] close(10) = -1 EBADF (Bad file descriptor) [pid 5695] close(11) = -1 EBADF (Bad file descriptor) [pid 5695] close(12) = -1 EBADF (Bad file descriptor) [pid 5695] close(13) = -1 EBADF (Bad file descriptor) [pid 5695] close(14) = -1 EBADF (Bad file descriptor) [pid 5695] close(15) = -1 EBADF (Bad file descriptor) [pid 5695] close(16) = -1 EBADF (Bad file descriptor) [pid 5695] close(17) = -1 EBADF (Bad file descriptor) [pid 5695] close(18) = -1 EBADF (Bad file descriptor) [pid 5695] close(19) = -1 EBADF (Bad file descriptor) [pid 5695] close(20) = -1 EBADF (Bad file descriptor) [pid 5695] close(21) = -1 EBADF (Bad file descriptor) [pid 5695] close(22) = -1 EBADF (Bad file descriptor) [pid 5695] close(23) = -1 EBADF (Bad file descriptor) [pid 5695] close(24) = -1 EBADF (Bad file descriptor) [pid 5695] close(25) = -1 EBADF (Bad file descriptor) [pid 5695] close(26) = -1 EBADF (Bad file descriptor) [pid 5695] close(27) = -1 EBADF (Bad file descriptor) [pid 5695] close(28) = -1 EBADF (Bad file descriptor) [pid 5695] close(29) = -1 EBADF (Bad file descriptor) [pid 5695] exit_group(0) = ? [pid 5695] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [ 137.498125][ T5695] ialloc: diAlloc returned -17! [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./48/file1") = 0 [pid 5604] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./48/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./48") = 0 [pid 5604] mkdir("./49", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5696 attached , child_tidptr=0x55558daac6d0) = 52 [pid 5696] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5696] <... set_robust_list resumed>) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] chdir("./49") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5696] write(1, "executing program\n", 18) = 18 executing program [pid 5696] memfd_create("syzkaller", 0) = 3 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5696] munmap(0x7f910aff4000, 138412032) = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5696] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5696] close(3) = 0 [pid 5696] close(4) = 0 [pid 5696] mkdir("./file1", 0777) = 0 [pid 5696] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5696] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5696] chdir("./file1") = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5696] ioctl(4, LOOP_CLR_FD) = 0 [pid 5696] close(4) = 0 [pid 5696] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5696] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 137.970262][ T5696] loop0: detected capacity change from 0 to 32768 [pid 5696] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5696] close(3) = 0 [pid 5696] close(4) = -1 EBADF (Bad file descriptor) [pid 5696] close(5) = -1 EBADF (Bad file descriptor) [pid 5696] close(6) = -1 EBADF (Bad file descriptor) [pid 5696] close(7) = -1 EBADF (Bad file descriptor) [pid 5696] close(8) = -1 EBADF (Bad file descriptor) [pid 5696] close(9) = -1 EBADF (Bad file descriptor) [pid 5696] close(10) = -1 EBADF (Bad file descriptor) [pid 5696] close(11) = -1 EBADF (Bad file descriptor) [pid 5696] close(12) = -1 EBADF (Bad file descriptor) [pid 5696] close(13) = -1 EBADF (Bad file descriptor) [pid 5696] close(14) = -1 EBADF (Bad file descriptor) [pid 5696] close(15) = -1 EBADF (Bad file descriptor) [pid 5696] close(16) = -1 EBADF (Bad file descriptor) [pid 5696] close(17) = -1 EBADF (Bad file descriptor) [pid 5696] close(18) = -1 EBADF (Bad file descriptor) [pid 5696] close(19) = -1 EBADF (Bad file descriptor) [pid 5696] close(20) = -1 EBADF (Bad file descriptor) [pid 5696] close(21) = -1 EBADF (Bad file descriptor) [pid 5696] close(22) = -1 EBADF (Bad file descriptor) [pid 5696] close(23) = -1 EBADF (Bad file descriptor) [pid 5696] close(24) = -1 EBADF (Bad file descriptor) [pid 5696] close(25) = -1 EBADF (Bad file descriptor) [pid 5696] close(26) = -1 EBADF (Bad file descriptor) [pid 5696] close(27) = -1 EBADF (Bad file descriptor) [pid 5696] close(28) = -1 EBADF (Bad file descriptor) [pid 5696] close(29) = -1 EBADF (Bad file descriptor) [pid 5696] exit_group(0) = ? [ 138.022841][ T5696] ialloc: diAlloc returned -17! [pid 5696] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./49/file1") = 0 [pid 5604] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./49/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./49") = 0 [pid 5604] mkdir("./50", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [ 138.153882][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.153986][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5697 attached [pid 5697] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 53 [pid 5697] <... set_robust_list resumed>) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5697] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] chdir("./50") = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5697] setpgid(0, 0) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5697] write(3, "1000", 4) = 4 [pid 5697] close(3) = 0 [pid 5697] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5697] write(1, "executing program\n", 18) = 18 executing program [pid 5697] memfd_create("syzkaller", 0) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5697] munmap(0x7f910aff4000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5697] close(3) = 0 [pid 5697] close(4) = 0 [pid 5697] mkdir("./file1", 0777) = 0 [pid 5697] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5697] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5697] chdir("./file1") = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5697] ioctl(4, LOOP_CLR_FD) = 0 [pid 5697] close(4) = 0 [pid 5697] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5697] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5697] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5697] close(3) = 0 [pid 5697] close(4) = -1 EBADF (Bad file descriptor) [pid 5697] close(5) = -1 EBADF (Bad file descriptor) [ 138.517934][ T5697] loop0: detected capacity change from 0 to 32768 [pid 5697] close(6) = -1 EBADF (Bad file descriptor) [pid 5697] close(7) = -1 EBADF (Bad file descriptor) [pid 5697] close(8) = -1 EBADF (Bad file descriptor) [pid 5697] close(9) = -1 EBADF (Bad file descriptor) [pid 5697] close(10) = -1 EBADF (Bad file descriptor) [pid 5697] close(11) = -1 EBADF (Bad file descriptor) [pid 5697] close(12) = -1 EBADF (Bad file descriptor) [pid 5697] close(13) = -1 EBADF (Bad file descriptor) [pid 5697] close(14) = -1 EBADF (Bad file descriptor) [pid 5697] close(15) = -1 EBADF (Bad file descriptor) [pid 5697] close(16) = -1 EBADF (Bad file descriptor) [pid 5697] close(17) = -1 EBADF (Bad file descriptor) [pid 5697] close(18) = -1 EBADF (Bad file descriptor) [pid 5697] close(19) = -1 EBADF (Bad file descriptor) [pid 5697] close(20) = -1 EBADF (Bad file descriptor) [pid 5697] close(21) = -1 EBADF (Bad file descriptor) [pid 5697] close(22) = -1 EBADF (Bad file descriptor) [pid 5697] close(23) = -1 EBADF (Bad file descriptor) [pid 5697] close(24) = -1 EBADF (Bad file descriptor) [pid 5697] close(25) = -1 EBADF (Bad file descriptor) [pid 5697] close(26) = -1 EBADF (Bad file descriptor) [pid 5697] close(27) = -1 EBADF (Bad file descriptor) [pid 5697] close(28) = -1 EBADF (Bad file descriptor) [pid 5697] close(29) = -1 EBADF (Bad file descriptor) [pid 5697] exit_group(0) = ? [pid 5697] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [ 138.577081][ T5697] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./50/file1") = 0 [pid 5604] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./50/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./50") = 0 [pid 5604] mkdir("./51", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5698 attached [pid 5698] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 54 [pid 5698] <... set_robust_list resumed>) = 0 [pid 5698] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5698] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] chdir("./51" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] <... chdir resumed>) = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5698] setpgid(0, 0) = 0 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5698] write(3, "1000", 4) = 4 [pid 5698] close(3) = 0 [pid 5698] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] write(1, "executing program\n", 18) = 18 [pid 5698] memfd_create("syzkaller", 0) = 3 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 executing program [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5698] munmap(0x7f910aff4000, 138412032) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5698] close(3) = 0 [pid 5698] close(4) = 0 [pid 5698] mkdir("./file1", 0777) = 0 [pid 5698] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5698] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5698] chdir("./file1") = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5698] ioctl(4, LOOP_CLR_FD) = 0 [pid 5698] close(4) = 0 [pid 5698] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5698] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5698] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5698] close(3) = 0 [pid 5698] close(4) = -1 EBADF (Bad file descriptor) [pid 5698] close(5) = -1 EBADF (Bad file descriptor) [ 139.069724][ T5698] loop0: detected capacity change from 0 to 32768 [pid 5698] close(6) = -1 EBADF (Bad file descriptor) [pid 5698] close(7) = -1 EBADF (Bad file descriptor) [pid 5698] close(8) = -1 EBADF (Bad file descriptor) [pid 5698] close(9) = -1 EBADF (Bad file descriptor) [pid 5698] close(10) = -1 EBADF (Bad file descriptor) [pid 5698] close(11) = -1 EBADF (Bad file descriptor) [pid 5698] close(12) = -1 EBADF (Bad file descriptor) [pid 5698] close(13) = -1 EBADF (Bad file descriptor) [pid 5698] close(14) = -1 EBADF (Bad file descriptor) [pid 5698] close(15) = -1 EBADF (Bad file descriptor) [pid 5698] close(16) = -1 EBADF (Bad file descriptor) [pid 5698] close(17) = -1 EBADF (Bad file descriptor) [pid 5698] close(18) = -1 EBADF (Bad file descriptor) [pid 5698] close(19) = -1 EBADF (Bad file descriptor) [pid 5698] close(20) = -1 EBADF (Bad file descriptor) [pid 5698] close(21) = -1 EBADF (Bad file descriptor) [pid 5698] close(22) = -1 EBADF (Bad file descriptor) [pid 5698] close(23) = -1 EBADF (Bad file descriptor) [pid 5698] close(24) = -1 EBADF (Bad file descriptor) [pid 5698] close(25) = -1 EBADF (Bad file descriptor) [pid 5698] close(26) = -1 EBADF (Bad file descriptor) [pid 5698] close(27) = -1 EBADF (Bad file descriptor) [pid 5698] close(28) = -1 EBADF (Bad file descriptor) [pid 5698] close(29) = -1 EBADF (Bad file descriptor) [pid 5698] exit_group(0) = ? [pid 5698] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [ 139.119995][ T5698] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./51/file1") = 0 [pid 5604] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./51/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./51") = 0 [pid 5604] mkdir("./52", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5699 attached [pid 5699] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 55 [pid 5699] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] chdir("./52") = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5699] setpgid(0, 0) = 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5699] write(3, "1000", 4) = 4 [pid 5699] close(3) = 0 [pid 5699] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5699] write(1, "executing program\n", 18) = 18 executing program [pid 5699] memfd_create("syzkaller", 0) = 3 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5699] munmap(0x7f910aff4000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5699] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5699] close(3) = 0 [pid 5699] close(4) = 0 [pid 5699] mkdir("./file1", 0777) = 0 [pid 5699] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5699] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5699] chdir("./file1") = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5699] ioctl(4, LOOP_CLR_FD) = 0 [pid 5699] close(4) = 0 [pid 5699] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5699] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5699] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5699] close(3) = 0 [pid 5699] close(4) = -1 EBADF (Bad file descriptor) [pid 5699] close(5) = -1 EBADF (Bad file descriptor) [pid 5699] close(6) = -1 EBADF (Bad file descriptor) [pid 5699] close(7) = -1 EBADF (Bad file descriptor) [pid 5699] close(8) = -1 EBADF (Bad file descriptor) [pid 5699] close(9) = -1 EBADF (Bad file descriptor) [pid 5699] close(10) = -1 EBADF (Bad file descriptor) [pid 5699] close(11) = -1 EBADF (Bad file descriptor) [pid 5699] close(12) = -1 EBADF (Bad file descriptor) [pid 5699] close(13) = -1 EBADF (Bad file descriptor) [pid 5699] close(14) = -1 EBADF (Bad file descriptor) [pid 5699] close(15) = -1 EBADF (Bad file descriptor) [pid 5699] close(16) = -1 EBADF (Bad file descriptor) [pid 5699] close(17) = -1 EBADF (Bad file descriptor) [pid 5699] close(18) = -1 EBADF (Bad file descriptor) [pid 5699] close(19) = -1 EBADF (Bad file descriptor) [pid 5699] close(20) = -1 EBADF (Bad file descriptor) [pid 5699] close(21) = -1 EBADF (Bad file descriptor) [pid 5699] close(22) = -1 EBADF (Bad file descriptor) [pid 5699] close(23) = -1 EBADF (Bad file descriptor) [pid 5699] close(24) = -1 EBADF (Bad file descriptor) [pid 5699] close(25) = -1 EBADF (Bad file descriptor) [pid 5699] close(26) = -1 EBADF (Bad file descriptor) [pid 5699] close(27) = -1 EBADF (Bad file descriptor) [pid 5699] close(28) = -1 EBADF (Bad file descriptor) [pid 5699] close(29) = -1 EBADF (Bad file descriptor) [pid 5699] exit_group(0) = ? [pid 5699] +++ exited with 0 +++ [ 139.632468][ T5699] loop0: detected capacity change from 0 to 32768 [ 139.665141][ T5699] ialloc: diAlloc returned -17! [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5604] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./52/file1") = 0 [pid 5604] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./52/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./52") = 0 [pid 5604] mkdir("./53", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5700 attached [pid 5700] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 56 [pid 5700] <... set_robust_list resumed>) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] chdir("./53") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5700] write(1, "executing program\n", 18) = 18 executing program [pid 5700] memfd_create("syzkaller", 0) = 3 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5700] munmap(0x7f910aff4000, 138412032) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5700] close(3) = 0 [pid 5700] close(4) = 0 [pid 5700] mkdir("./file1", 0777) = 0 [pid 5700] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5700] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5700] chdir("./file1") = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5700] ioctl(4, LOOP_CLR_FD) = 0 [pid 5700] close(4) = 0 [ 140.136063][ T5700] loop0: detected capacity change from 0 to 32768 [pid 5700] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5700] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5700] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5700] close(3) = 0 [pid 5700] close(4) = -1 EBADF (Bad file descriptor) [pid 5700] close(5) = -1 EBADF (Bad file descriptor) [pid 5700] close(6) = -1 EBADF (Bad file descriptor) [pid 5700] close(7) = -1 EBADF (Bad file descriptor) [pid 5700] close(8) = -1 EBADF (Bad file descriptor) [pid 5700] close(9) = -1 EBADF (Bad file descriptor) [pid 5700] close(10) = -1 EBADF (Bad file descriptor) [pid 5700] close(11) = -1 EBADF (Bad file descriptor) [pid 5700] close(12) = -1 EBADF (Bad file descriptor) [pid 5700] close(13) = -1 EBADF (Bad file descriptor) [pid 5700] close(14) = -1 EBADF (Bad file descriptor) [pid 5700] close(15) = -1 EBADF (Bad file descriptor) [pid 5700] close(16) = -1 EBADF (Bad file descriptor) [pid 5700] close(17) = -1 EBADF (Bad file descriptor) [pid 5700] close(18) = -1 EBADF (Bad file descriptor) [pid 5700] close(19) = -1 EBADF (Bad file descriptor) [pid 5700] close(20) = -1 EBADF (Bad file descriptor) [pid 5700] close(21) = -1 EBADF (Bad file descriptor) [pid 5700] close(22) = -1 EBADF (Bad file descriptor) [pid 5700] close(23) = -1 EBADF (Bad file descriptor) [pid 5700] close(24) = -1 EBADF (Bad file descriptor) [pid 5700] close(25) = -1 EBADF (Bad file descriptor) [pid 5700] close(26) = -1 EBADF (Bad file descriptor) [pid 5700] close(27) = -1 EBADF (Bad file descriptor) [pid 5700] close(28) = -1 EBADF (Bad file descriptor) [ 140.193116][ T5700] ialloc: diAlloc returned -17! [pid 5700] close(29) = -1 EBADF (Bad file descriptor) [pid 5700] exit_group(0) = ? [pid 5700] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./53/file1") = 0 [pid 5604] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./53/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./53") = 0 [pid 5604] mkdir("./54", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5701 attached , child_tidptr=0x55558daac6d0) = 57 [pid 5701] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5701] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5701] chdir("./54") = 0 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5701] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5701] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5701] write(1, "executing program\n", 18) = 18 [pid 5701] memfd_create("syzkaller", 0) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5701] munmap(0x7f910aff4000, 138412032) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5701] close(3) = 0 [pid 5701] close(4) = 0 [pid 5701] mkdir("./file1", 0777) = 0 [pid 5701] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5701] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file1") = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] close(4) = 0 [pid 5701] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5701] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5701] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5701] close(3) = 0 [pid 5701] close(4) = -1 EBADF (Bad file descriptor) [pid 5701] close(5) = -1 EBADF (Bad file descriptor) [pid 5701] close(6) = -1 EBADF (Bad file descriptor) [ 140.667348][ T5701] loop0: detected capacity change from 0 to 32768 [pid 5701] close(7) = -1 EBADF (Bad file descriptor) [pid 5701] close(8) = -1 EBADF (Bad file descriptor) [pid 5701] close(9) = -1 EBADF (Bad file descriptor) [pid 5701] close(10) = -1 EBADF (Bad file descriptor) [pid 5701] close(11) = -1 EBADF (Bad file descriptor) [pid 5701] close(12) = -1 EBADF (Bad file descriptor) [pid 5701] close(13) = -1 EBADF (Bad file descriptor) [pid 5701] close(14) = -1 EBADF (Bad file descriptor) [pid 5701] close(15) = -1 EBADF (Bad file descriptor) [pid 5701] close(16) = -1 EBADF (Bad file descriptor) [pid 5701] close(17) = -1 EBADF (Bad file descriptor) [pid 5701] close(18) = -1 EBADF (Bad file descriptor) [pid 5701] close(19) = -1 EBADF (Bad file descriptor) [pid 5701] close(20) = -1 EBADF (Bad file descriptor) [pid 5701] close(21) = -1 EBADF (Bad file descriptor) [pid 5701] close(22) = -1 EBADF (Bad file descriptor) [pid 5701] close(23) = -1 EBADF (Bad file descriptor) [pid 5701] close(24) = -1 EBADF (Bad file descriptor) [pid 5701] close(25) = -1 EBADF (Bad file descriptor) [pid 5701] close(26) = -1 EBADF (Bad file descriptor) [pid 5701] close(27) = -1 EBADF (Bad file descriptor) [pid 5701] close(28) = -1 EBADF (Bad file descriptor) [pid 5701] close(29) = -1 EBADF (Bad file descriptor) [pid 5701] exit_group(0) = ? [pid 5701] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 140.718442][ T5701] ialloc: diAlloc returned -17! [pid 5604] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./54/file1") = 0 [pid 5604] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./54/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./54") = 0 [pid 5604] mkdir("./55", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5702 attached , child_tidptr=0x55558daac6d0) = 58 [pid 5702] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5702] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5702] chdir("./55") = 0 [pid 5702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5702] setpgid(0, 0) = 0 [pid 5702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5702] write(3, "1000", 4) = 4 [pid 5702] close(3) = 0 [pid 5702] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5702] write(1, "executing program\n", 18) = 18 [pid 5702] memfd_create("syzkaller", 0) = 3 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5702] munmap(0x7f910aff4000, 138412032) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5702] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5702] close(3) = 0 [pid 5702] close(4) = 0 [pid 5702] mkdir("./file1", 0777) = 0 [pid 5702] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5702] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5702] chdir("./file1") = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5702] ioctl(4, LOOP_CLR_FD) = 0 [pid 5702] close(4) = 0 [ 141.190220][ T5702] loop0: detected capacity change from 0 to 32768 [pid 5702] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5702] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5702] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5702] close(3) = 0 [pid 5702] close(4) = -1 EBADF (Bad file descriptor) [pid 5702] close(5) = -1 EBADF (Bad file descriptor) [pid 5702] close(6) = -1 EBADF (Bad file descriptor) [pid 5702] close(7) = -1 EBADF (Bad file descriptor) [pid 5702] close(8) = -1 EBADF (Bad file descriptor) [pid 5702] close(9) = -1 EBADF (Bad file descriptor) [pid 5702] close(10) = -1 EBADF (Bad file descriptor) [pid 5702] close(11) = -1 EBADF (Bad file descriptor) [pid 5702] close(12) = -1 EBADF (Bad file descriptor) [pid 5702] close(13) = -1 EBADF (Bad file descriptor) [pid 5702] close(14) = -1 EBADF (Bad file descriptor) [pid 5702] close(15) = -1 EBADF (Bad file descriptor) [pid 5702] close(16) = -1 EBADF (Bad file descriptor) [pid 5702] close(17) = -1 EBADF (Bad file descriptor) [pid 5702] close(18) = -1 EBADF (Bad file descriptor) [pid 5702] close(19) = -1 EBADF (Bad file descriptor) [pid 5702] close(20) = -1 EBADF (Bad file descriptor) [pid 5702] close(21) = -1 EBADF (Bad file descriptor) [pid 5702] close(22) = -1 EBADF (Bad file descriptor) [pid 5702] close(23) = -1 EBADF (Bad file descriptor) [pid 5702] close(24) = -1 EBADF (Bad file descriptor) [pid 5702] close(25) = -1 EBADF (Bad file descriptor) [pid 5702] close(26) = -1 EBADF (Bad file descriptor) [ 141.238473][ T5702] ialloc: diAlloc returned -17! [pid 5702] close(27) = -1 EBADF (Bad file descriptor) [pid 5702] close(28) = -1 EBADF (Bad file descriptor) [pid 5702] close(29) = -1 EBADF (Bad file descriptor) [pid 5702] exit_group(0) = ? [pid 5702] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./55/file1") = 0 [pid 5604] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./55/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./55") = 0 [pid 5604] mkdir("./56", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5703 attached , child_tidptr=0x55558daac6d0) = 59 [pid 5703] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5703] <... set_robust_list resumed>) = 0 [pid 5703] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5703] chdir("./56") = 0 [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5703] setpgid(0, 0) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5703] write(1, "executing program\n", 18) = 18 [pid 5703] memfd_create("syzkaller", 0) = 3 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5703] munmap(0x7f910aff4000, 138412032) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5703] close(3) = 0 [pid 5703] close(4) = 0 [pid 5703] mkdir("./file1", 0777) = 0 [pid 5703] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5703] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5703] chdir("./file1") = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5703] ioctl(4, LOOP_CLR_FD) = 0 [pid 5703] close(4) = 0 [pid 5703] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5703] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5703] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5703] close(3) = 0 [pid 5703] close(4) = -1 EBADF (Bad file descriptor) [pid 5703] close(5) = -1 EBADF (Bad file descriptor) [pid 5703] close(6) = -1 EBADF (Bad file descriptor) [pid 5703] close(7) = -1 EBADF (Bad file descriptor) [pid 5703] close(8) = -1 EBADF (Bad file descriptor) [pid 5703] close(9) = -1 EBADF (Bad file descriptor) [pid 5703] close(10) = -1 EBADF (Bad file descriptor) [pid 5703] close(11) = -1 EBADF (Bad file descriptor) [pid 5703] close(12) = -1 EBADF (Bad file descriptor) [pid 5703] close(13) = -1 EBADF (Bad file descriptor) [pid 5703] close(14) = -1 EBADF (Bad file descriptor) [pid 5703] close(15) = -1 EBADF (Bad file descriptor) [pid 5703] close(16) = -1 EBADF (Bad file descriptor) [pid 5703] close(17) = -1 EBADF (Bad file descriptor) [pid 5703] close(18) = -1 EBADF (Bad file descriptor) [pid 5703] close(19) = -1 EBADF (Bad file descriptor) [pid 5703] close(20) = -1 EBADF (Bad file descriptor) [pid 5703] close(21) = -1 EBADF (Bad file descriptor) [pid 5703] close(22) = -1 EBADF (Bad file descriptor) [pid 5703] close(23) = -1 EBADF (Bad file descriptor) [pid 5703] close(24) = -1 EBADF (Bad file descriptor) [pid 5703] close(25) = -1 EBADF (Bad file descriptor) [pid 5703] close(26) = -1 EBADF (Bad file descriptor) [pid 5703] close(27) = -1 EBADF (Bad file descriptor) [pid 5703] close(28) = -1 EBADF (Bad file descriptor) [pid 5703] close(29) = -1 EBADF (Bad file descriptor) [pid 5703] exit_group(0) = ? [ 141.694559][ T5703] loop0: detected capacity change from 0 to 32768 [ 141.734246][ T5703] ialloc: diAlloc returned -17! [pid 5703] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./56/file1") = 0 [pid 5604] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./56/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./56") = 0 [pid 5604] mkdir("./57", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5704 attached , child_tidptr=0x55558daac6d0) = 60 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5704] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] chdir("./57") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [pid 5704] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5704] write(1, "executing program\n", 18) = 18 [pid 5704] memfd_create("syzkaller", 0) = 3 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5704] munmap(0x7f910aff4000, 138412032) = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5704] close(3) = 0 [pid 5704] close(4) = 0 [pid 5704] mkdir("./file1", 0777) = 0 [pid 5704] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5704] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5704] chdir("./file1") = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5704] ioctl(4, LOOP_CLR_FD) = 0 [pid 5704] close(4) = 0 [pid 5704] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5704] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5704] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5704] close(3) = 0 [pid 5704] close(4) = -1 EBADF (Bad file descriptor) [pid 5704] close(5) = -1 EBADF (Bad file descriptor) [pid 5704] close(6) = -1 EBADF (Bad file descriptor) [pid 5704] close(7) = -1 EBADF (Bad file descriptor) [pid 5704] close(8) = -1 EBADF (Bad file descriptor) [pid 5704] close(9) = -1 EBADF (Bad file descriptor) [pid 5704] close(10) = -1 EBADF (Bad file descriptor) [pid 5704] close(11) = -1 EBADF (Bad file descriptor) [pid 5704] close(12) = -1 EBADF (Bad file descriptor) [pid 5704] close(13) = -1 EBADF (Bad file descriptor) [pid 5704] close(14) = -1 EBADF (Bad file descriptor) [pid 5704] close(15) = -1 EBADF (Bad file descriptor) [pid 5704] close(16) = -1 EBADF (Bad file descriptor) [pid 5704] close(17) = -1 EBADF (Bad file descriptor) [pid 5704] close(18) = -1 EBADF (Bad file descriptor) [pid 5704] close(19) = -1 EBADF (Bad file descriptor) [ 142.239813][ T5704] loop0: detected capacity change from 0 to 32768 [ 142.272718][ T5704] ialloc: diAlloc returned -17! [pid 5704] close(20) = -1 EBADF (Bad file descriptor) [pid 5704] close(21) = -1 EBADF (Bad file descriptor) [pid 5704] close(22) = -1 EBADF (Bad file descriptor) [pid 5704] close(23) = -1 EBADF (Bad file descriptor) [pid 5704] close(24) = -1 EBADF (Bad file descriptor) [pid 5704] close(25) = -1 EBADF (Bad file descriptor) [pid 5704] close(26) = -1 EBADF (Bad file descriptor) [pid 5704] close(27) = -1 EBADF (Bad file descriptor) [pid 5704] close(28) = -1 EBADF (Bad file descriptor) [pid 5704] close(29) = -1 EBADF (Bad file descriptor) [pid 5704] exit_group(0) = ? [pid 5704] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./57/file1") = 0 [pid 5604] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./57/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./57") = 0 [pid 5604] mkdir("./58", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5705 attached [pid 5705] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 61 [pid 5705] <... set_robust_list resumed>) = 0 [pid 5705] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5705] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5705] chdir("./58" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5705] <... chdir resumed>) = 0 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5705] setpgid(0, 0) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5705] write(3, "1000", 4) = 4 [pid 5705] close(3) = 0 [pid 5705] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5705] write(1, "executing program\n", 18) = 18 [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5705] munmap(0x7f910aff4000, 138412032) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5705] close(3) = 0 [pid 5705] close(4) = 0 [pid 5705] mkdir("./file1", 0777) = 0 [pid 5705] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5705] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5705] chdir("./file1") = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 142.800143][ T5705] loop0: detected capacity change from 0 to 32768 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5705] close(4) = 0 [pid 5705] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5705] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5705] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5705] close(3) = 0 [pid 5705] close(4) = -1 EBADF (Bad file descriptor) [pid 5705] close(5) = -1 EBADF (Bad file descriptor) [pid 5705] close(6) = -1 EBADF (Bad file descriptor) [pid 5705] close(7) = -1 EBADF (Bad file descriptor) [pid 5705] close(8) = -1 EBADF (Bad file descriptor) [pid 5705] close(9) = -1 EBADF (Bad file descriptor) [pid 5705] close(10) = -1 EBADF (Bad file descriptor) [pid 5705] close(11) = -1 EBADF (Bad file descriptor) [pid 5705] close(12) = -1 EBADF (Bad file descriptor) [pid 5705] close(13) = -1 EBADF (Bad file descriptor) [pid 5705] close(14) = -1 EBADF (Bad file descriptor) [pid 5705] close(15) = -1 EBADF (Bad file descriptor) [pid 5705] close(16) = -1 EBADF (Bad file descriptor) [pid 5705] close(17) = -1 EBADF (Bad file descriptor) [pid 5705] close(18) = -1 EBADF (Bad file descriptor) [pid 5705] close(19) = -1 EBADF (Bad file descriptor) [ 142.873737][ T5705] ialloc: diAlloc returned -17! [pid 5705] close(20) = -1 EBADF (Bad file descriptor) [pid 5705] close(21) = -1 EBADF (Bad file descriptor) [pid 5705] close(22) = -1 EBADF (Bad file descriptor) [pid 5705] close(23) = -1 EBADF (Bad file descriptor) [pid 5705] close(24) = -1 EBADF (Bad file descriptor) [pid 5705] close(25) = -1 EBADF (Bad file descriptor) [pid 5705] close(26) = -1 EBADF (Bad file descriptor) [pid 5705] close(27) = -1 EBADF (Bad file descriptor) [pid 5705] close(28) = -1 EBADF (Bad file descriptor) [pid 5705] close(29) = -1 EBADF (Bad file descriptor) [pid 5705] exit_group(0) = ? [pid 5705] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./58/file1") = 0 [pid 5604] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./58/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./58") = 0 [pid 5604] mkdir("./59", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5706 attached [pid 5706] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 62 [pid 5706] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5706] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5706] chdir("./59") = 0 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] setpgid(0, 0) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5706] write(3, "1000", 4) = 4 [pid 5706] close(3) = 0 [pid 5706] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 5706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5706] write(1, "executing program\n", 18) = 18 [pid 5706] memfd_create("syzkaller", 0) = 3 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5706] munmap(0x7f910aff4000, 138412032) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5706] close(3) = 0 [pid 5706] close(4) = 0 [pid 5706] mkdir("./file1", 0777) = 0 [pid 5706] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5706] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5706] chdir("./file1") = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5706] ioctl(4, LOOP_CLR_FD) = 0 [pid 5706] close(4) = 0 [pid 5706] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5706] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5706] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [ 143.383118][ T5706] loop0: detected capacity change from 0 to 32768 [pid 5706] close(3) = 0 [pid 5706] close(4) = -1 EBADF (Bad file descriptor) [pid 5706] close(5) = -1 EBADF (Bad file descriptor) [pid 5706] close(6) = -1 EBADF (Bad file descriptor) [pid 5706] close(7) = -1 EBADF (Bad file descriptor) [pid 5706] close(8) = -1 EBADF (Bad file descriptor) [pid 5706] close(9) = -1 EBADF (Bad file descriptor) [pid 5706] close(10) = -1 EBADF (Bad file descriptor) [pid 5706] close(11) = -1 EBADF (Bad file descriptor) [pid 5706] close(12) = -1 EBADF (Bad file descriptor) [pid 5706] close(13) = -1 EBADF (Bad file descriptor) [pid 5706] close(14) = -1 EBADF (Bad file descriptor) [pid 5706] close(15) = -1 EBADF (Bad file descriptor) [pid 5706] close(16) = -1 EBADF (Bad file descriptor) [pid 5706] close(17) = -1 EBADF (Bad file descriptor) [pid 5706] close(18) = -1 EBADF (Bad file descriptor) [pid 5706] close(19) = -1 EBADF (Bad file descriptor) [pid 5706] close(20) = -1 EBADF (Bad file descriptor) [pid 5706] close(21) = -1 EBADF (Bad file descriptor) [pid 5706] close(22) = -1 EBADF (Bad file descriptor) [pid 5706] close(23) = -1 EBADF (Bad file descriptor) [pid 5706] close(24) = -1 EBADF (Bad file descriptor) [pid 5706] close(25) = -1 EBADF (Bad file descriptor) [pid 5706] close(26) = -1 EBADF (Bad file descriptor) [pid 5706] close(27) = -1 EBADF (Bad file descriptor) [pid 5706] close(28) = -1 EBADF (Bad file descriptor) [pid 5706] close(29) = -1 EBADF (Bad file descriptor) [pid 5706] exit_group(0) = ? [pid 5706] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 143.421515][ T5706] ialloc: diAlloc returned -17! [pid 5604] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./59/file1") = 0 [pid 5604] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./59/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./59") = 0 [pid 5604] mkdir("./60", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5707 attached , child_tidptr=0x55558daac6d0) = 63 [pid 5707] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5707] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5707] chdir("./60") = 0 [pid 5707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5707] setpgid(0, 0) = 0 [pid 5707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5707] write(3, "1000", 4) = 4 [pid 5707] close(3) = 0 executing program [pid 5707] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5707] write(1, "executing program\n", 18) = 18 [pid 5707] memfd_create("syzkaller", 0) = 3 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5707] munmap(0x7f910aff4000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5707] close(3) = 0 [pid 5707] close(4) = 0 [pid 5707] mkdir("./file1", 0777) = 0 [pid 5707] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [ 143.874294][ T5707] loop0: detected capacity change from 0 to 32768 [pid 5707] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5707] chdir("./file1") = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5707] ioctl(4, LOOP_CLR_FD) = 0 [pid 5707] close(4) = 0 [pid 5707] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5707] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5707] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5707] close(3) = 0 [pid 5707] close(4) = -1 EBADF (Bad file descriptor) [pid 5707] close(5) = -1 EBADF (Bad file descriptor) [pid 5707] close(6) = -1 EBADF (Bad file descriptor) [pid 5707] close(7) = -1 EBADF (Bad file descriptor) [pid 5707] close(8) = -1 EBADF (Bad file descriptor) [pid 5707] close(9) = -1 EBADF (Bad file descriptor) [pid 5707] close(10) = -1 EBADF (Bad file descriptor) [pid 5707] close(11) = -1 EBADF (Bad file descriptor) [pid 5707] close(12) = -1 EBADF (Bad file descriptor) [pid 5707] close(13) = -1 EBADF (Bad file descriptor) [pid 5707] close(14) = -1 EBADF (Bad file descriptor) [pid 5707] close(15) = -1 EBADF (Bad file descriptor) [pid 5707] close(16) = -1 EBADF (Bad file descriptor) [pid 5707] close(17) = -1 EBADF (Bad file descriptor) [pid 5707] close(18) = -1 EBADF (Bad file descriptor) [pid 5707] close(19) = -1 EBADF (Bad file descriptor) [pid 5707] close(20) = -1 EBADF (Bad file descriptor) [pid 5707] close(21) = -1 EBADF (Bad file descriptor) [pid 5707] close(22) = -1 EBADF (Bad file descriptor) [pid 5707] close(23) = -1 EBADF (Bad file descriptor) [pid 5707] close(24) = -1 EBADF (Bad file descriptor) [pid 5707] close(25) = -1 EBADF (Bad file descriptor) [pid 5707] close(26) = -1 EBADF (Bad file descriptor) [pid 5707] close(27) = -1 EBADF (Bad file descriptor) [pid 5707] close(28) = -1 EBADF (Bad file descriptor) [pid 5707] close(29) = -1 EBADF (Bad file descriptor) [pid 5707] exit_group(0) = ? [pid 5707] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 143.924676][ T5707] ialloc: diAlloc returned -17! [pid 5604] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./60/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./60/file1") = 0 [pid 5604] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./60/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./60") = 0 [pid 5604] mkdir("./61", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5708 attached [pid 5708] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5708] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 64 [pid 5708] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5708] chdir("./61") = 0 [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0) = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5708] write(3, "1000", 4) = 4 [pid 5708] close(3) = 0 [pid 5708] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5708] write(1, "executing program\n", 18) = 18 executing program [pid 5708] memfd_create("syzkaller", 0) = 3 [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5708] munmap(0x7f910aff4000, 138412032) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5708] close(3) = 0 [pid 5708] close(4) = 0 [pid 5708] mkdir("./file1", 0777) = 0 [pid 5708] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5708] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5708] chdir("./file1") = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5708] ioctl(4, LOOP_CLR_FD) = 0 [pid 5708] close(4) = 0 [pid 5708] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5708] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5708] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5708] close(3) = 0 [pid 5708] close(4) = -1 EBADF (Bad file descriptor) [pid 5708] close(5) = -1 EBADF (Bad file descriptor) [pid 5708] close(6) = -1 EBADF (Bad file descriptor) [pid 5708] close(7) = -1 EBADF (Bad file descriptor) [pid 5708] close(8) = -1 EBADF (Bad file descriptor) [pid 5708] close(9) = -1 EBADF (Bad file descriptor) [pid 5708] close(10) = -1 EBADF (Bad file descriptor) [pid 5708] close(11) = -1 EBADF (Bad file descriptor) [pid 5708] close(12) = -1 EBADF (Bad file descriptor) [pid 5708] close(13) = -1 EBADF (Bad file descriptor) [pid 5708] close(14) = -1 EBADF (Bad file descriptor) [pid 5708] close(15) = -1 EBADF (Bad file descriptor) [pid 5708] close(16) = -1 EBADF (Bad file descriptor) [pid 5708] close(17) = -1 EBADF (Bad file descriptor) [pid 5708] close(18) = -1 EBADF (Bad file descriptor) [pid 5708] close(19) = -1 EBADF (Bad file descriptor) [pid 5708] close(20) = -1 EBADF (Bad file descriptor) [pid 5708] close(21) = -1 EBADF (Bad file descriptor) [pid 5708] close(22) = -1 EBADF (Bad file descriptor) [pid 5708] close(23) = -1 EBADF (Bad file descriptor) [pid 5708] close(24) = -1 EBADF (Bad file descriptor) [pid 5708] close(25) = -1 EBADF (Bad file descriptor) [pid 5708] close(26) = -1 EBADF (Bad file descriptor) [pid 5708] close(27) = -1 EBADF (Bad file descriptor) [pid 5708] close(28) = -1 EBADF (Bad file descriptor) [pid 5708] close(29) = -1 EBADF (Bad file descriptor) [pid 5708] exit_group(0) = ? [pid 5708] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [ 144.385171][ T5708] loop0: detected capacity change from 0 to 32768 [ 144.429749][ T5708] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./61/file1") = 0 [pid 5604] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./61/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./61") = 0 [pid 5604] mkdir("./62", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5709 attached , child_tidptr=0x55558daac6d0) = 65 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5709] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5709] chdir("./62") = 0 [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5709] setpgid(0, 0) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3) = 0 [pid 5709] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5709] write(1, "executing program\n", 18) = 18 executing program [pid 5709] memfd_create("syzkaller", 0) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5709] munmap(0x7f910aff4000, 138412032) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5709] close(3) = 0 [pid 5709] close(4) = 0 [pid 5709] mkdir("./file1", 0777) = 0 [pid 5709] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5709] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file1") = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [pid 5709] close(4) = 0 [pid 5709] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5709] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5709] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5709] close(3) = 0 [pid 5709] close(4) = -1 EBADF (Bad file descriptor) [pid 5709] close(5) = -1 EBADF (Bad file descriptor) [pid 5709] close(6) = -1 EBADF (Bad file descriptor) [pid 5709] close(7) = -1 EBADF (Bad file descriptor) [pid 5709] close(8) = -1 EBADF (Bad file descriptor) [pid 5709] close(9) = -1 EBADF (Bad file descriptor) [pid 5709] close(10) = -1 EBADF (Bad file descriptor) [pid 5709] close(11) = -1 EBADF (Bad file descriptor) [pid 5709] close(12) = -1 EBADF (Bad file descriptor) [pid 5709] close(13) = -1 EBADF (Bad file descriptor) [pid 5709] close(14) = -1 EBADF (Bad file descriptor) [pid 5709] close(15) = -1 EBADF (Bad file descriptor) [ 144.942158][ T5709] loop0: detected capacity change from 0 to 32768 [pid 5709] close(16) = -1 EBADF (Bad file descriptor) [pid 5709] close(17) = -1 EBADF (Bad file descriptor) [pid 5709] close(18) = -1 EBADF (Bad file descriptor) [pid 5709] close(19) = -1 EBADF (Bad file descriptor) [pid 5709] close(20) = -1 EBADF (Bad file descriptor) [pid 5709] close(21) = -1 EBADF (Bad file descriptor) [pid 5709] close(22) = -1 EBADF (Bad file descriptor) [pid 5709] close(23) = -1 EBADF (Bad file descriptor) [pid 5709] close(24) = -1 EBADF (Bad file descriptor) [pid 5709] close(25) = -1 EBADF (Bad file descriptor) [pid 5709] close(26) = -1 EBADF (Bad file descriptor) [pid 5709] close(27) = -1 EBADF (Bad file descriptor) [pid 5709] close(28) = -1 EBADF (Bad file descriptor) [pid 5709] close(29) = -1 EBADF (Bad file descriptor) [pid 5709] exit_group(0) = ? [pid 5709] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 144.999729][ T5709] ialloc: diAlloc returned -17! [pid 5604] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./62/file1") = 0 [pid 5604] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./62/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./62") = 0 [pid 5604] mkdir("./63", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = 0 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5710 attached , child_tidptr=0x55558daac6d0) = 66 [pid 5710] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5710] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5710] chdir("./63") = 0 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5710] setpgid(0, 0) = 0 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5710] write(3, "1000", 4) = 4 [pid 5710] close(3) = 0 [pid 5710] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5710] write(1, "executing program\n", 18) = 18 executing program [pid 5710] memfd_create("syzkaller", 0) = 3 [pid 5710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5710] munmap(0x7f910aff4000, 138412032) = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5710] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5710] close(3) = 0 [pid 5710] close(4) = 0 [pid 5710] mkdir("./file1", 0777) = 0 [pid 5710] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5710] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5710] chdir("./file1") = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5710] ioctl(4, LOOP_CLR_FD) = 0 [pid 5710] close(4) = 0 [pid 5710] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5710] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5710] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5710] close(3) = 0 [pid 5710] close(4) = -1 EBADF (Bad file descriptor) [pid 5710] close(5) = -1 EBADF (Bad file descriptor) [pid 5710] close(6) = -1 EBADF (Bad file descriptor) [pid 5710] close(7) = -1 EBADF (Bad file descriptor) [pid 5710] close(8) = -1 EBADF (Bad file descriptor) [pid 5710] close(9) = -1 EBADF (Bad file descriptor) [pid 5710] close(10) = -1 EBADF (Bad file descriptor) [pid 5710] close(11) = -1 EBADF (Bad file descriptor) [pid 5710] close(12) = -1 EBADF (Bad file descriptor) [pid 5710] close(13) = -1 EBADF (Bad file descriptor) [pid 5710] close(14) = -1 EBADF (Bad file descriptor) [pid 5710] close(15) = -1 EBADF (Bad file descriptor) [pid 5710] close(16) = -1 EBADF (Bad file descriptor) [pid 5710] close(17) = -1 EBADF (Bad file descriptor) [pid 5710] close(18) = -1 EBADF (Bad file descriptor) [pid 5710] close(19) = -1 EBADF (Bad file descriptor) [pid 5710] close(20) = -1 EBADF (Bad file descriptor) [pid 5710] close(21) = -1 EBADF (Bad file descriptor) [pid 5710] close(22) = -1 EBADF (Bad file descriptor) [pid 5710] close(23) = -1 EBADF (Bad file descriptor) [pid 5710] close(24) = -1 EBADF (Bad file descriptor) [pid 5710] close(25) = -1 EBADF (Bad file descriptor) [pid 5710] close(26) = -1 EBADF (Bad file descriptor) [pid 5710] close(27) = -1 EBADF (Bad file descriptor) [pid 5710] close(28) = -1 EBADF (Bad file descriptor) [pid 5710] close(29) = -1 EBADF (Bad file descriptor) [pid 5710] exit_group(0) = ? [pid 5710] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 145.438289][ T5710] loop0: detected capacity change from 0 to 32768 [ 145.474680][ T5710] ialloc: diAlloc returned -17! [pid 5604] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./63/file1") = 0 [pid 5604] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./63/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./63") = 0 [pid 5604] mkdir("./64", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5711 attached , child_tidptr=0x55558daac6d0) = 67 [pid 5711] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5711] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5711] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5711] chdir("./64" [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5711] <... chdir resumed>) = 0 [pid 5711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5711] setpgid(0, 0) = 0 [pid 5711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5711] write(3, "1000", 4) = 4 [pid 5711] close(3) = 0 [pid 5711] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5711] write(1, "executing program\n", 18) = 18 executing program [pid 5711] memfd_create("syzkaller", 0) = 3 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5711] munmap(0x7f910aff4000, 138412032) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5711] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5711] close(3) = 0 [pid 5711] close(4) = 0 [pid 5711] mkdir("./file1", 0777) = 0 [pid 5711] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5711] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 145.990890][ T5711] loop0: detected capacity change from 0 to 32768 [pid 5711] chdir("./file1") = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5711] ioctl(4, LOOP_CLR_FD) = 0 [pid 5711] close(4) = 0 [pid 5711] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5711] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5711] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5711] close(3) = 0 [pid 5711] close(4) = -1 EBADF (Bad file descriptor) [pid 5711] close(5) = -1 EBADF (Bad file descriptor) [pid 5711] close(6) = -1 EBADF (Bad file descriptor) [pid 5711] close(7) = -1 EBADF (Bad file descriptor) [pid 5711] close(8) = -1 EBADF (Bad file descriptor) [pid 5711] close(9) = -1 EBADF (Bad file descriptor) [pid 5711] close(10) = -1 EBADF (Bad file descriptor) [pid 5711] close(11) = -1 EBADF (Bad file descriptor) [pid 5711] close(12) = -1 EBADF (Bad file descriptor) [pid 5711] close(13) = -1 EBADF (Bad file descriptor) [pid 5711] close(14) = -1 EBADF (Bad file descriptor) [pid 5711] close(15) = -1 EBADF (Bad file descriptor) [pid 5711] close(16) = -1 EBADF (Bad file descriptor) [pid 5711] close(17) = -1 EBADF (Bad file descriptor) [pid 5711] close(18) = -1 EBADF (Bad file descriptor) [pid 5711] close(19) = -1 EBADF (Bad file descriptor) [pid 5711] close(20) = -1 EBADF (Bad file descriptor) [pid 5711] close(21) = -1 EBADF (Bad file descriptor) [pid 5711] close(22) = -1 EBADF (Bad file descriptor) [pid 5711] close(23) = -1 EBADF (Bad file descriptor) [pid 5711] close(24) = -1 EBADF (Bad file descriptor) [pid 5711] close(25) = -1 EBADF (Bad file descriptor) [pid 5711] close(26) = -1 EBADF (Bad file descriptor) [pid 5711] close(27) = -1 EBADF (Bad file descriptor) [pid 5711] close(28) = -1 EBADF (Bad file descriptor) [pid 5711] close(29) = -1 EBADF (Bad file descriptor) [pid 5711] exit_group(0) = ? [pid 5711] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [ 146.041951][ T5711] ialloc: diAlloc returned -17! [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./64/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./64/file1") = 0 [pid 5604] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./64/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./64") = 0 [pid 5604] mkdir("./65", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5712 attached , child_tidptr=0x55558daac6d0) = 68 [pid 5712] set_robust_list(0x55558daac6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5712] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5712] chdir("./65") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5712] write(1, "executing program\n", 18) = 18 [pid 5712] memfd_create("syzkaller", 0) = 3 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5712] munmap(0x7f910aff4000, 138412032) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5712] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5712] close(3) = 0 [pid 5712] close(4) = 0 [pid 5712] mkdir("./file1", 0777) = 0 [pid 5712] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5712] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5712] chdir("./file1") = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5712] ioctl(4, LOOP_CLR_FD) = 0 [pid 5712] close(4) = 0 [ 146.492605][ T5712] loop0: detected capacity change from 0 to 32768 [pid 5712] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5712] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5712] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5712] close(3) = 0 [pid 5712] close(4) = -1 EBADF (Bad file descriptor) [pid 5712] close(5) = -1 EBADF (Bad file descriptor) [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [ 146.532794][ T5712] ialloc: diAlloc returned -17! [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20) = -1 EBADF (Bad file descriptor) [pid 5712] close(21) = -1 EBADF (Bad file descriptor) [pid 5712] close(22) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] exit_group(0) = ? [pid 5712] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./65/file1") = 0 [pid 5604] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./65/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./65") = 0 [pid 5604] mkdir("./66", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x55558daac6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x55558daac6d0) = 69 [pid 5713] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5713] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5713] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5713] chdir("./66") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5713] write(1, "executing program\n", 18) = 18 executing program [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5713] munmap(0x7f910aff4000, 138412032) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] close(4) = 0 [pid 5713] mkdir("./file1", 0777) = 0 [pid 5713] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5713] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file1") = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [pid 5713] close(4) = 0 [pid 5713] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5713] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5713] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5713] close(3) = 0 [pid 5713] close(4) = -1 EBADF (Bad file descriptor) [pid 5713] close(5) = -1 EBADF (Bad file descriptor) [pid 5713] close(6) = -1 EBADF (Bad file descriptor) [pid 5713] close(7) = -1 EBADF (Bad file descriptor) [pid 5713] close(8) = -1 EBADF (Bad file descriptor) [pid 5713] close(9) = -1 EBADF (Bad file descriptor) [pid 5713] close(10) = -1 EBADF (Bad file descriptor) [pid 5713] close(11) = -1 EBADF (Bad file descriptor) [pid 5713] close(12) = -1 EBADF (Bad file descriptor) [pid 5713] close(13) = -1 EBADF (Bad file descriptor) [pid 5713] close(14) = -1 EBADF (Bad file descriptor) [pid 5713] close(15) = -1 EBADF (Bad file descriptor) [pid 5713] close(16) = -1 EBADF (Bad file descriptor) [pid 5713] close(17) = -1 EBADF (Bad file descriptor) [pid 5713] close(18) = -1 EBADF (Bad file descriptor) [pid 5713] close(19) = -1 EBADF (Bad file descriptor) [pid 5713] close(20) = -1 EBADF (Bad file descriptor) [pid 5713] close(21) = -1 EBADF (Bad file descriptor) [pid 5713] close(22) = -1 EBADF (Bad file descriptor) [pid 5713] close(23) = -1 EBADF (Bad file descriptor) [pid 5713] close(24) = -1 EBADF (Bad file descriptor) [pid 5713] close(25) = -1 EBADF (Bad file descriptor) [pid 5713] close(26) = -1 EBADF (Bad file descriptor) [pid 5713] close(27) = -1 EBADF (Bad file descriptor) [pid 5713] close(28) = -1 EBADF (Bad file descriptor) [pid 5713] close(29) = -1 EBADF (Bad file descriptor) [pid 5713] exit_group(0) = ? [ 147.045807][ T5713] loop0: detected capacity change from 0 to 32768 [ 147.079995][ T5713] ialloc: diAlloc returned -17! [pid 5713] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5604] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5604] getdents64(4, 0x55558dab58f0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x55558dab58f0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./66/file1") = 0 [pid 5604] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./66/binderfs") = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./66") = 0 [pid 5604] mkdir("./67", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP) = 3 [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5714 attached , child_tidptr=0x55558daac6d0) = 70 [pid 5714] set_robust_list(0x55558daac6e0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5714] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] chdir("./67") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] read(200, 0x7ffebc481c70, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5714] write(1, "executing program\n", 18) = 18 [pid 5714] memfd_create("syzkaller", 0) = 3 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f910aff4000 [pid 5714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5714] munmap(0x7f910aff4000, 138412032) = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5714] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5714] close(3) = 0 [pid 5714] close(4) = 0 [pid 5714] mkdir("./file1", 0777) = 0 [pid 5714] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5714] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5714] chdir("./file1") = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5714] ioctl(4, LOOP_CLR_FD) = 0 [pid 5714] close(4) = 0 [pid 5714] mkdirat(AT_FDCWD, "./proc_mnt", 0777) = -1 EEXIST (File exists) [pid 5714] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5714] fchown(-1, 0, 0) = -1 EBADF (Bad file descriptor) [pid 5714] close(3) = 0 [pid 5714] close(4) = -1 EBADF (Bad file descriptor) [pid 5714] close(5) = -1 EBADF (Bad file descriptor) [pid 5714] close(6) = -1 EBADF (Bad file descriptor) [pid 5714] close(7) = -1 EBADF (Bad file descriptor) [pid 5714] close(8) = -1 EBADF (Bad file descriptor) [pid 5714] close(9) = -1 EBADF (Bad file descriptor) [pid 5714] close(10) = -1 EBADF (Bad file descriptor) [pid 5714] close(11) = -1 EBADF (Bad file descriptor) [pid 5714] close(12) = -1 EBADF (Bad file descriptor) [pid 5714] close(13) = -1 EBADF (Bad file descriptor) [pid 5714] close(14) = -1 EBADF (Bad file descriptor) [pid 5714] close(15) = -1 EBADF (Bad file descriptor) [pid 5714] close(16) = -1 EBADF (Bad file descriptor) [pid 5714] close(17) = -1 EBADF (Bad file descriptor) [pid 5714] close(18) = -1 EBADF (Bad file descriptor) [pid 5714] close(19) = -1 EBADF (Bad file descriptor) [pid 5714] close(20) = -1 EBADF (Bad file descriptor) [pid 5714] close(21) = -1 EBADF (Bad file descriptor) [pid 5714] close(22) = -1 EBADF (Bad file descriptor) [pid 5714] close(23) = -1 EBADF (Bad file descriptor) [pid 5714] close(24) = -1 EBADF (Bad file descriptor) [pid 5714] close(25) = -1 EBADF (Bad file descriptor) [pid 5714] close(26) = -1 EBADF (Bad file descriptor) [pid 5714] close(27) = -1 EBADF (Bad file descriptor) [pid 5714] close(28) = -1 EBADF (Bad file descriptor) [pid 5714] close(29) = -1 EBADF (Bad file descriptor) [pid 5714] exit_group(0) = ? [pid 5714] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5604] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5604] getdents64(3, 0x55558daad8b0 /* 4 entries */, 32768) = 112 [ 147.532947][ T5714] loop0: detected capacity change from 0 to 32768 [ 147.561846][ T5714] ialloc: diAlloc returned -17! [ 147.665079][ T13] ================================================================== [ 147.665099][ T13] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 147.665155][ T13] Read of size 4096 at addr ffff88804022b000 by task kworker/u8:1/13 [ 147.665175][ T13] [ 147.665204][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.665234][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.665249][ T13] Workqueue: loop0 loop_rootcg_workfn [ 147.665293][ T13] Call Trace: [ 147.665311][ T13] [ 147.665321][ T13] dump_stack_lvl+0xe8/0x150 [ 147.665361][ T13] print_address_description+0x55/0x1e0 [ 147.665396][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 147.665431][ T13] print_report+0x58/0x70 [ 147.665460][ T13] kasan_report+0x117/0x150 [ 147.665486][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 147.665527][ T13] kasan_check_range+0x264/0x2c0 [ 147.665552][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 147.665588][ T13] __asan_memcpy+0x29/0x70 [ 147.665625][ T13] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 147.665674][ T13] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 147.665711][ T13] ? rcu_is_watching+0x16/0xb0 [ 147.665736][ T13] ? shmem_write_begin+0x1ce/0x320 [ 147.665770][ T13] generic_perform_write+0x5a8/0x8b0 [ 147.665807][ T13] ? __pfx_generic_perform_write+0x10/0x10 [ 147.665837][ T13] ? __mark_inode_dirty+0x4e7/0x13b0 [ 147.665871][ T13] ? preempt_count_add+0x6a/0x140 [ 147.665904][ T13] ? mnt_put_write_access_file+0xc2/0x100 [ 147.665938][ T13] ? file_update_time_flags+0x3b1/0x450 [ 147.665973][ T13] shmem_file_write_iter+0xfb/0x120 [ 147.665997][ T13] lo_rw_aio+0xc78/0xf30 [ 147.666034][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 147.666056][ T13] ? __pfx_lo_rw_aio+0x10/0x10 [ 147.666088][ T13] ? rt_spin_unlock+0x159/0x200 [ 147.666114][ T13] ? kthread_associate_blkcg+0x359/0x600 [ 147.666139][ T13] ? rt_spin_unlock+0x165/0x200 [ 147.666165][ T13] loop_process_work+0x638/0x11d0 [ 147.666208][ T13] ? __pfx_loop_process_work+0x10/0x10 [ 147.666239][ T13] ? look_up_lock_class+0x57/0x110 [ 147.666270][ T13] ? register_lock_class+0x31/0x2e0 [ 147.666310][ T13] ? __lock_acquire+0x747/0x2de0 [ 147.666347][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.666378][ T13] ? lock_acquire+0x115/0x350 [ 147.666412][ T13] ? rcu_is_watching+0x16/0xb0 [ 147.666435][ T13] ? process_scheduled_works+0x97a/0x1630 [ 147.666466][ T13] process_scheduled_works+0xc3d/0x1630 [ 147.666515][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.666549][ T13] ? assign_work+0x3cf/0x5d0 [ 147.666582][ T13] worker_thread+0xa47/0xfb0 [ 147.666631][ T13] kthread+0x38b/0x470 [ 147.666653][ T13] ? __pfx_worker_thread+0x10/0x10 [ 147.666684][ T13] ? __pfx_kthread+0x10/0x10 [ 147.666707][ T13] ret_from_fork+0x514/0xb70 [ 147.666732][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 147.666755][ T13] ? __switch_to+0xc89/0x1420 [ 147.666796][ T13] ? __pfx_kthread+0x10/0x10 [ 147.666824][ T13] ret_from_fork_asm+0x1a/0x30 [ 147.666855][ T13] [ 147.666863][ T13] [ 147.666869][ T13] The buggy address belongs to the physical page: [ 147.666892][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x4022b [ 147.666912][ T13] flags: 0x80000000000000(node=0|zone=1) [ 147.666945][ T13] raw: 0080000000000000 ffffea0000b4c108 ffffea000077be08 0000000000000000 [ 147.666964][ T13] raw: 0000000000000024 0000000000000000 00000000ffffffff 0000000000000000 [ 147.666980][ T13] page dumped because: kasan: bad access detected [ 147.666995][ T13] page_owner tracks the page as freed [ 147.667002][ T13] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5714, tgid 5714 (syz-executor297), ts 147549944242 [ 147.667033][ T13] post_alloc_hook+0x1f9/0x250 [ 147.667063][ T13] get_page_from_freelist+0x2591/0x2600 [ 147.667083][ T13] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 147.667104][ T13] alloc_pages_mpol+0xd4/0x280 [ 147.667126][ T13] alloc_pages_noprof+0xd2/0x2f0 [ 147.667148][ T13] lmLogInit+0x357/0x1a20 [ 147.667168][ T13] lmLogOpen+0x4e3/0xf90 [ 147.667188][ T13] jfs_mount_rw+0xf3/0x670 [ 147.667207][ T13] jfs_fill_super+0x769/0xda0 [ 147.667234][ T13] get_tree_bdev_flags+0x430/0x4f0 [ 147.667262][ T13] vfs_get_tree+0x92/0x2a0 [ 147.667289][ T13] do_new_mount+0x325/0xb00 [ 147.667320][ T13] __se_sys_mount+0x31d/0x420 [ 147.667342][ T13] do_syscall_64+0x166/0x520 [ 147.667371][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.667392][ T13] page last free pid 5604 tgid 5604 ts 147664158786 stack trace: [ 147.667407][ T13] __free_frozen_pages+0xf8e/0x1070 [ 147.667437][ T13] lmLogShutdown+0x44e/0x850 [ 147.667458][ T13] lmLogClose+0x28c/0x530 [ 147.667479][ T13] jfs_umount+0x2da/0x3b0 [ 147.667498][ T13] jfs_put_super+0x8c/0x190 [ 147.667526][ T13] generic_shutdown_super+0x13d/0x2d0 [ 147.667550][ T13] kill_block_super+0x44/0xa0 [ 147.667578][ T13] deactivate_locked_super+0xbe/0x110 [ 147.667601][ T13] cleanup_mnt+0x204/0x2a0 [ 147.667628][ T13] task_work_run+0x1d9/0x270 [ 147.667650][ T13] ptrace_notify+0x27c/0x2b0 [ 147.667677][ T13] ptrace_report_syscall_exit+0x2d/0x50 [ 147.667698][ T13] do_syscall_64+0x4a0/0x520 [ 147.667727][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.667747][ T13] [ 147.667753][ T13] Memory state around the buggy address: [ 147.667764][ T13] ffff88804022af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.667780][ T13] ffff88804022af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.667795][ T13] >ffff88804022b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.667806][ T13] ^ [ 147.667817][ T13] ffff88804022b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.667832][ T13] ffff88804022b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.667843][ T13] ================================================================== [ 147.670542][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.257230][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.267066][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.277151][ T13] Workqueue: loop0 loop_rootcg_workfn [ 148.282568][ T13] Call Trace: [ 148.285878][ T13] [ 148.288834][ T13] vpanic+0x56d/0xa60 [ 148.292844][ T13] ? rcu_is_watching+0x16/0xb0 [ 148.297630][ T13] ? __pfx_vpanic+0x10/0x10 [ 148.302160][ T13] panic+0xc5/0xd0 [ 148.305909][ T13] ? __pfx_panic+0x10/0x10 [ 148.310353][ T13] ? preempt_schedule_thunk+0x16/0x40 [ 148.315749][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.321852][ T13] ? preempt_schedule_thunk+0x16/0x40 [ 148.327253][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.333360][ T13] check_panic_on_warn+0x89/0xb0 [ 148.338325][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.344449][ T13] end_report+0x73/0x170 [ 148.348718][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.354811][ T13] kasan_report+0x128/0x150 [ 148.359341][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.365466][ T13] kasan_check_range+0x264/0x2c0 [ 148.370431][ T13] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.376527][ T13] __asan_memcpy+0x29/0x70 [ 148.381002][ T13] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 148.386964][ T13] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 148.393352][ T13] ? rcu_is_watching+0x16/0xb0 [ 148.398140][ T13] ? shmem_write_begin+0x1ce/0x320 [ 148.403285][ T13] generic_perform_write+0x5a8/0x8b0 [ 148.408619][ T13] ? __pfx_generic_perform_write+0x10/0x10 [ 148.414451][ T13] ? __mark_inode_dirty+0x4e7/0x13b0 [ 148.419770][ T13] ? preempt_count_add+0x6a/0x140 [ 148.424842][ T13] ? mnt_put_write_access_file+0xc2/0x100 [ 148.430599][ T13] ? file_update_time_flags+0x3b1/0x450 [ 148.436179][ T13] shmem_file_write_iter+0xfb/0x120 [ 148.441401][ T13] lo_rw_aio+0xc78/0xf30 [ 148.445739][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 148.451194][ T13] ? __pfx_lo_rw_aio+0x10/0x10 [ 148.456031][ T13] ? rt_spin_unlock+0x159/0x200 [ 148.460913][ T13] ? kthread_associate_blkcg+0x359/0x600 [ 148.466576][ T13] ? rt_spin_unlock+0x165/0x200 [ 148.471456][ T13] loop_process_work+0x638/0x11d0 [ 148.476534][ T13] ? __pfx_loop_process_work+0x10/0x10 [ 148.482042][ T13] ? look_up_lock_class+0x57/0x110 [ 148.487206][ T13] ? register_lock_class+0x31/0x2e0 [ 148.492440][ T13] ? __lock_acquire+0x747/0x2de0 [ 148.497414][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 148.502470][ T13] ? lock_acquire+0x115/0x350 [ 148.507202][ T13] ? rcu_is_watching+0x16/0xb0 [ 148.511992][ T13] ? process_scheduled_works+0x97a/0x1630 [ 148.517747][ T13] process_scheduled_works+0xc3d/0x1630 [ 148.523349][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.529374][ T13] ? assign_work+0x3cf/0x5d0 [ 148.534017][ T13] worker_thread+0xa47/0xfb0 [ 148.538671][ T13] kthread+0x38b/0x470 [ 148.542768][ T13] ? __pfx_worker_thread+0x10/0x10 [ 148.547911][ T13] ? __pfx_kthread+0x10/0x10 [ 148.552526][ T13] ret_from_fork+0x514/0xb70 [ 148.557147][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 148.562283][ T13] ? __switch_to+0xc89/0x1420 [ 148.566997][ T13] ? __pfx_kthread+0x10/0x10 [ 148.571614][ T13] ret_from_fork_asm+0x1a/0x30 [ 148.576405][ T13] [ 148.579611][ T13] Kernel Offset: disabled [ 148.583950][ T13] Rebooting in 86400 seconds..