./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3854666871 <...> Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. execve("./syz-executor3854666871", ["./syz-executor3854666871"], 0x7ffd488f36b0 /* 10 vars */) = 0 brk(NULL) = 0x555557df1000 brk(0x555557df1d00) = 0x555557df1d00 arch_prctl(ARCH_SET_FS, 0x555557df1380) = 0 set_tid_address(0x555557df1650) = 5828 set_robust_list(0x555557df1660, 24) = 0 rseq(0x555557df1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3854666871", 4096) = 28 getrandom("\x4f\xf2\x03\xb9\x28\x78\xff\x8b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557df1d00 brk(0x555557e12d00) = 0x555557e12d00 brk(0x555557e13000) = 0x555557e13000 mprotect(0x7fd6e1d5e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached , child_tidptr=0x555557df1650) = 5829 [pid 5829] set_robust_list(0x555557df1660, 24) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] mkdir("./syzkaller.S4v8fF", 0700./strace-static-x86_64: Process 5830 attached [pid 5828] <... clone resumed>, child_tidptr=0x555557df1650) = 5830 [pid 5830] set_robust_list(0x555557df1660, 24 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5831 attached [pid 5829] <... mkdir resumed>) = 0 [pid 5828] <... clone resumed>, child_tidptr=0x555557df1650) = 5831 [pid 5831] set_robust_list(0x555557df1660, 24 [pid 5830] mkdir("./syzkaller.k155gl", 0700 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5829] chmod("./syzkaller.S4v8fF", 0777 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] mkdir("./syzkaller.PTrRfy", 0700 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5832 attached [pid 5830] chmod("./syzkaller.k155gl", 0777 [pid 5828] <... clone resumed>, child_tidptr=0x555557df1650) = 5832 [pid 5832] set_robust_list(0x555557df1660, 24 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... set_robust_list resumed>) = 0 [pid 5829] chdir("./syzkaller.S4v8fF" [pid 5830] <... chmod resumed>) = 0 [pid 5829] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5833 attached [pid 5829] mkdir("./0", 0777 [pid 5832] mkdir("./syzkaller.xsXtf5", 0700 [pid 5833] set_robust_list(0x555557df1660, 24 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] chdir("./syzkaller.k155gl" [pid 5828] <... clone resumed>, child_tidptr=0x555557df1650) = 5833 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5831] chmod("./syzkaller.PTrRfy", 0777 [pid 5830] <... chdir resumed>) = 0 [pid 5833] mkdir("./syzkaller.mpHcSI", 0700 [pid 5832] chmod("./syzkaller.xsXtf5", 0777 [pid 5829] <... mkdir resumed>) = 0 [pid 5830] mkdir("./0", 0777 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... chmod resumed>) = 0 [pid 5831] <... chmod resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] chmod("./syzkaller.mpHcSI", 0777 [pid 5832] chdir("./syzkaller.xsXtf5" [pid 5833] <... chmod resumed>) = 0 [pid 5832] <... chdir resumed>) = 0 [pid 5831] chdir("./syzkaller.PTrRfy" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] mkdir("./0", 0777 [pid 5831] <... chdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5831] mkdir("./0", 0777 [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] chdir("./syzkaller.mpHcSI" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5829] close(3 [pid 5833] mkdir("./0", 0777 [pid 5829] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] close(3 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5834 attached ./strace-static-x86_64: Process 5835 attached [pid 5834] set_robust_list(0x555557df1660, 24 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] <... set_robust_list resumed>) = 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5835] set_robust_list(0x555557df1660, 24 [pid 5834] chdir("./0" [pid 5833] <... openat resumed>) = 3 [pid 5831] close(3 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] <... chdir resumed>) = 0 [pid 5835] chdir("./0" [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] close(3 [pid 5831] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5834 [pid 5835] <... chdir resumed>) = 0 [pid 5834] <... prctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5835 ./strace-static-x86_64: Process 5836 attached [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] setpgid(0, 0 [pid 5833] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached [pid 5836] set_robust_list(0x555557df1660, 24 [pid 5835] <... prctl resumed>) = 0 [pid 5834] <... setpgid resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] set_robust_list(0x555557df1660, 24 [pid 5835] setpgid(0, 0 [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5838 attached [pid 5837] <... set_robust_list resumed>) = 0 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5835] <... setpgid resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5838 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5837 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5836 [pid 5836] chdir("./0" [pid 5838] set_robust_list(0x555557df1660, 24) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5838] chdir("./0" [pid 5837] chdir("./0" [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] write(3, "1000", 4 [pid 5837] <... chdir resumed>) = 0 [pid 5836] <... prctl resumed>) = 0 [pid 5836] setpgid(0, 0 [pid 5835] <... openat resumed>) = 3 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] <... write resumed>) = 4 [pid 5837] <... prctl resumed>) = 0 [pid 5834] close(3 [pid 5838] <... chdir resumed>) = 0 [pid 5837] setpgid(0, 0 [pid 5834] <... close resumed>) = 0 [pid 5837] <... setpgid resumed>) = 0 [pid 5834] symlink("/dev/binderfs", "./binderfs" [pid 5836] <... setpgid resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] <... symlink resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5836] <... openat resumed>) = 3 [pid 5838] <... openat resumed>) = 3 executing program [pid 5837] write(3, "1000", 4 [pid 5836] write(3, "1000", 4 [pid 5834] write(1, "executing program\n", 18 [pid 5837] <... write resumed>) = 4 [pid 5837] close(3 [pid 5834] <... write resumed>) = 18 [pid 5837] <... close resumed>) = 0 [pid 5838] write(3, "1000", 4 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5836] <... write resumed>) = 4 [pid 5834] memfd_create("syzkaller", 0 [pid 5838] <... write resumed>) = 4 [pid 5837] <... symlink resumed>) = 0 [pid 5836] close(3 [pid 5835] write(3, "1000", 4 [pid 5834] <... memfd_create resumed>) = 3 [pid 5838] close(3 [pid 5837] write(1, "executing program\n", 18 [pid 5836] <... close resumed>) = 0 [pid 5835] <... write resumed>) = 4 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 5838] <... close resumed>) = 0 [pid 5837] <... write resumed>) = 18 [pid 5836] symlink("/dev/binderfs", "./binderfs" [pid 5835] close(3 [pid 5834] <... mmap resumed>) = 0x7fd6d9800000 [pid 5838] symlink("/dev/binderfs", "./binderfs" [pid 5837] memfd_create("syzkaller", 0 [pid 5836] <... symlink resumed>) = 0 [pid 5835] <... close resumed>) = 0 executing program executing program [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5838] <... symlink resumed>) = 0 [pid 5837] <... memfd_create resumed>) = 3 [pid 5836] write(1, "executing program\n", 18 [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5838] write(1, "executing program\n", 18 [pid 5836] <... write resumed>) = 18 [pid 5838] <... write resumed>) = 18 [pid 5836] memfd_create("syzkaller", 0 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5835] <... symlink resumed>) = 0 executing program [pid 5837] <... mmap resumed>) = 0x7fd6d9800000 [pid 5835] write(1, "executing program\n", 18 [pid 5838] memfd_create("syzkaller", 0 [pid 5836] <... memfd_create resumed>) = 3 [pid 5835] <... write resumed>) = 18 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5838] <... memfd_create resumed>) = 3 [pid 5836] <... mmap resumed>) = 0x7fd6d9800000 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5835] memfd_create("syzkaller", 0 [pid 5834] <... write resumed>) = 524288 [pid 5838] <... mmap resumed>) = 0x7fd6d9800000 [pid 5837] <... write resumed>) = 524288 [pid 5835] <... memfd_create resumed>) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5834] munmap(0x7fd6d9800000, 138412032 [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5834] <... munmap resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5837] munmap(0x7fd6d9800000, 138412032 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5836] <... write resumed>) = 524288 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5834] <... ioctl resumed>) = 0 [pid 5834] close(3) = 0 [pid 5834] close(4 [pid 5838] <... write resumed>) = 524288 [pid 5836] munmap(0x7fd6d9800000, 138412032 [pid 5835] <... write resumed>) = 524288 [pid 5834] <... close resumed>) = 0 [pid 5834] mkdir("./file1", 0777) = 0 [pid 5834] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5838] munmap(0x7fd6d9800000, 138412032 [pid 5836] <... munmap resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5838] <... munmap resumed>) = 0 [pid 5837] <... munmap resumed>) = 0 [pid 5836] <... openat resumed>) = 4 [pid 5835] munmap(0x7fd6d9800000, 138412032 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5836] ioctl(4, LOOP_SET_FD, 3 [pid 5838] <... openat resumed>) = 4 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] <... munmap resumed>) = 0 [ 57.975845][ T5834] loop1: detected capacity change from 0 to 1024 [ 58.009052][ T5836] loop2: detected capacity change from 0 to 1024 [pid 5838] ioctl(4, LOOP_SET_FD, 3 [pid 5837] <... openat resumed>) = 4 [pid 5836] <... ioctl resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5834] <... mount resumed>) = 0 [pid 5837] ioctl(4, LOOP_SET_FD, 3 [pid 5835] <... openat resumed>) = 4 [pid 5838] <... ioctl resumed>) = 0 [pid 5836] close(3 [pid 5834] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5838] close(3 [pid 5836] <... close resumed>) = 0 [pid 5838] <... close resumed>) = 0 [pid 5836] close(4 [pid 5834] <... openat resumed>) = 3 [pid 5838] close(4 [pid 5836] <... close resumed>) = 0 [pid 5836] mkdir("./file1", 0777) = 0 [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5834] chdir("./file1" [pid 5838] <... close resumed>) = 0 [pid 5836] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5838] mkdir("./file1", 0777) = 0 [pid 5838] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5834] <... chdir resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5834] chdir("./file0" [pid 5836] <... mount resumed>) = 0 [pid 5834] <... chdir resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5836] chdir("./file1") = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5834] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5836] chdir("./file0" [pid 5835] <... ioctl resumed>) = 0 [pid 5834] <... openat resumed>) = 4 [ 58.030255][ T5838] loop4: detected capacity change from 0 to 1024 [ 58.031183][ T5837] loop3: detected capacity change from 0 to 1024 [ 58.050117][ T5835] loop0: detected capacity change from 0 to 1024 [pid 5837] <... ioctl resumed>) = 0 [pid 5835] close(3 [pid 5834] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5837] close(3 [pid 5835] <... close resumed>) = 0 [pid 5834] <... creat resumed>) = 5 [pid 5837] <... close resumed>) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5835] close(4 [pid 5834] sync( [pid 5835] <... close resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5838] <... mount resumed>) = 0 [pid 5838] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5838] chdir("./file1") = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5837] close(4 [pid 5836] <... openat resumed>) = 4 [pid 5835] mkdir("./file1", 0777 [pid 5837] <... close resumed>) = 0 [pid 5838] chdir("./file0" [pid 5837] mkdir("./file1", 0777 [pid 5835] <... mkdir resumed>) = 0 [pid 5836] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5837] <... mkdir resumed>) = 0 [pid 5835] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5837] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5838] <... chdir resumed>) = 0 [ 58.071432][ T29] audit: type=1800 audit(1730647657.707:2): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5838] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5837] <... mount resumed>) = 0 [pid 5836] <... creat resumed>) = 5 [pid 5835] <... mount resumed>) = 0 [pid 5837] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] chdir("./file1" [pid 5838] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5837] <... openat resumed>) = 3 [pid 5836] sync( [pid 5835] <... chdir resumed>) = 0 [pid 5837] chdir("./file1" [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5837] <... chdir resumed>) = 0 [pid 5835] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] chdir("./file0" [pid 5837] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5837] chdir("./file0") = 0 [pid 5835] <... chdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5837] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5835] <... openat resumed>) = 4 [pid 5837] <... openat resumed>) = 4 [pid 5835] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5837] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [ 58.130171][ T29] audit: type=1800 audit(1730647657.747:3): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 5837] sync( [pid 5838] <... creat resumed>) = 5 [pid 5835] <... creat resumed>) = 5 [pid 5838] sync( [ 58.164938][ T29] audit: type=1800 audit(1730647657.767:4): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 58.185090][ T29] audit: type=1800 audit(1730647657.807:5): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [ 58.206590][ T29] audit: type=1800 audit(1730647657.807:6): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5835] sync( [pid 5838] <... sync resumed>) = 0 [pid 5838] exit_group(0 [pid 5837] <... sync resumed>) = 0 [pid 5835] <... sync resumed>) = 0 [pid 5834] <... sync resumed>) = 0 [pid 5837] exit_group(0 [pid 5834] exit_group(0 [pid 5838] <... exit_group resumed>) = ? [pid 5837] <... exit_group resumed>) = ? [pid 5835] exit_group(0 [pid 5834] <... exit_group resumed>) = ? [pid 5836] <... sync resumed>) = 0 [pid 5836] exit_group(0 [pid 5838] +++ exited with 0 +++ [pid 5837] +++ exited with 0 +++ [pid 5835] <... exit_group resumed>) = ? [pid 5834] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5836] <... exit_group resumed>) = ? [pid 5835] +++ exited with 0 +++ [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5834, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5836] +++ exited with 0 +++ [pid 5833] <... restart_syscall resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] newfstatat(3, "", [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5832] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./0/binderfs" [pid 5832] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5831] <... restart_syscall resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./0/binderfs" [pid 5830] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./0/binderfs" [pid 5829] unlink("./0/binderfs" [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./0/binderfs") = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./0/file1", [pid 5830] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./0/file1", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = 0 [pid 5830] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./0/file1", [pid 5833] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] newfstatat(AT_FDCWD, "./0/file1", [pid 5831] <... umount2 resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5829] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] newfstatat(4, "", [pid 5833] close(4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./0/file1", [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5833] rmdir("./0/file1" [pid 5832] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(4 [pid 5829] getdents64(4, [pid 5832] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5831] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] rmdir("./0/file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... openat resumed>) = 4 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] rmdir("./0/file1" [pid 5833] getdents64(3, [pid 5832] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 5830] getdents64(3, [pid 5833] close(3 [pid 5832] rmdir("./0/file1" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./0" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] close(4 [pid 5830] rmdir("./0" [pid 5829] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] mkdir("./1", 0777 [pid 5832] close(3) = 0 [pid 5831] rmdir("./0/file1" [pid 5829] rmdir("./0" [pid 5833] <... mkdir resumed>) = 0 [pid 5832] rmdir("./0" [pid 5831] <... rmdir resumed>) = 0 [pid 5830] mkdir("./1", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] getdents64(3, [pid 5829] mkdir("./1", 0777 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] mkdir("./1", 0777 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] rmdir("./0" [pid 5830] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... rmdir resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5830] <... ioctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] close(3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] <... ioctl resumed>) = 0 [pid 5831] mkdir("./1", 0777 [pid 5830] <... close resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5829] close(3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3./strace-static-x86_64: Process 5842 attached ) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5842 [pid 5842] set_robust_list(0x555557df1660, 24) = 0 [pid 5842] chdir("./1" [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 5843 attached [pid 5842] <... chdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] set_robust_list(0x555557df1660, 24 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5844 attached [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... prctl resumed>) = 0 [pid 5844] set_robust_list(0x555557df1660, 24 [pid 5843] chdir("./1" [pid 5842] setpgid(0, 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5844 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5843 ./strace-static-x86_64: Process 5845 attached [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5842] <... setpgid resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached [pid 5845] set_robust_list(0x555557df1660, 24 [pid 5844] chdir("./1" [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5843] <... prctl resumed>) = 0 [pid 5846] set_robust_list(0x555557df1660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5845 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5846] chdir("./1" [pid 5845] chdir("./1" [pid 5844] <... chdir resumed>) = 0 [pid 5843] setpgid(0, 0 [pid 5842] write(3, "1000", 4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5846 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] <... setpgid resumed>) = 0 [pid 5845] <... chdir resumed>) = 0 [pid 5842] <... write resumed>) = 4 [pid 5846] <... chdir resumed>) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] <... prctl resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] close(3 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] <... prctl resumed>) = 0 [pid 5844] setpgid(0, 0 [pid 5842] <... close resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5846] <... prctl resumed>) = 0 [pid 5845] setpgid(0, 0 [pid 5844] <... setpgid resumed>) = 0 [pid 5843] write(3, "1000", 4 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5845] <... setpgid resumed>) = 0 executing program executing program [pid 5846] setpgid(0, 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] <... write resumed>) = 4 [pid 5842] <... symlink resumed>) = 0 [pid 5846] <... setpgid resumed>) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] <... openat resumed>) = 3 [pid 5845] write(3, "1000", 4 [pid 5843] close(3 [pid 5842] write(1, "executing program\n", 18 [pid 5845] <... write resumed>) = 4 [pid 5844] write(3, "1000", 4 [pid 5843] <... close resumed>) = 0 [pid 5842] <... write resumed>) = 18 [pid 5846] <... openat resumed>) = 3 [pid 5845] close(3 [pid 5844] <... write resumed>) = 4 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5842] memfd_create("syzkaller", 0 [pid 5846] write(3, "1000", 4 [pid 5843] <... symlink resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5844] close(3 [pid 5843] write(1, "executing program\n", 18 [pid 5842] <... memfd_create resumed>) = 3 [pid 5845] symlink("/dev/binderfs", "./binderfs" [pid 5844] <... close resumed>) = 0 [pid 5846] <... write resumed>) = 4 [pid 5845] <... symlink resumed>) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5843] <... write resumed>) = 18 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 5842] <... mmap resumed>) = 0x7fd6d9800000 [pid 5846] <... symlink resumed>) = 0 [pid 5845] write(1, "executing program\n", 18 [pid 5844] <... symlink resumed>) = 0 [pid 5843] memfd_create("syzkaller", 0 [pid 5845] <... write resumed>) = 18 [pid 5846] write(1, "executing program\n", 18) = 18 [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5845] memfd_create("syzkaller", 0 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5845] <... memfd_create resumed>) = 3 [pid 5844] write(1, "executing program\n", 18 [pid 5843] <... memfd_create resumed>) = 3 executing program [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] <... write resumed>) = 18 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5845] <... mmap resumed>) = 0x7fd6d9800000 [pid 5844] memfd_create("syzkaller", 0 [pid 5843] <... mmap resumed>) = 0x7fd6d9800000 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5844] <... memfd_create resumed>) = 3 [pid 5842] <... write resumed>) = 524288 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5846] <... write resumed>) = 524288 [pid 5845] <... write resumed>) = 524288 [pid 5844] <... mmap resumed>) = 0x7fd6d9800000 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5842] munmap(0x7fd6d9800000, 138412032 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5843] <... write resumed>) = 524288 [pid 5842] <... munmap resumed>) = 0 [pid 5846] munmap(0x7fd6d9800000, 138412032 [pid 5845] munmap(0x7fd6d9800000, 138412032 [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5845] <... munmap resumed>) = 0 [pid 5846] <... munmap resumed>) = 0 [pid 5842] <... openat resumed>) = 4 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5845] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5844] <... write resumed>) = 524288 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5845] <... openat resumed>) = 4 [pid 5843] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5846] <... openat resumed>) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5844] munmap(0x7fd6d9800000, 138412032 [pid 5842] <... ioctl resumed>) = 0 [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 5845] <... ioctl resumed>) = 0 [pid 5844] <... munmap resumed>) = 0 [pid 5842] close(3 [pid 5843] <... ioctl resumed>) = 0 [pid 5846] <... ioctl resumed>) = 0 [pid 5845] close(3 [pid 5844] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5842] <... close resumed>) = 0 [pid 5843] close(3) = 0 [pid 5845] <... close resumed>) = 0 [pid 5845] close(4) = 0 [pid 5843] close(4 [pid 5846] close(3 [pid 5843] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5846] close(4) = 0 [pid 5846] mkdir("./file1", 0777 [pid 5845] mkdir("./file1", 0777 [pid 5846] <... mkdir resumed>) = 0 [pid 5846] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5845] <... mkdir resumed>) = 0 [pid 5846] <... mount resumed>) = 0 [pid 5844] <... openat resumed>) = 4 [pid 5843] mkdir("./file1", 0777 [pid 5842] close(4 [pid 5846] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] <... mkdir resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5846] chdir("./file1") = 0 [pid 5843] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5842] mkdir("./file1", 0777 [ 58.968992][ T5842] loop4: detected capacity change from 0 to 1024 [ 58.974259][ T5843] loop1: detected capacity change from 0 to 1024 [ 58.981667][ T5845] loop2: detected capacity change from 0 to 1024 [ 58.984545][ T5846] loop0: detected capacity change from 0 to 1024 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5842] <... mkdir resumed>) = 0 [pid 5846] chdir("./file0") = 0 [pid 5845] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5842] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5846] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5843] <... mount resumed>) = 0 [pid 5846] <... openat resumed>) = 4 [pid 5844] <... ioctl resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 5846] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5845] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5843] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5842] <... mount resumed>) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5842] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5845] chdir("./file1" [pid 5843] <... openat resumed>) = 3 [pid 5842] <... openat resumed>) = 3 [pid 5842] chdir("./file1") = 0 [pid 5843] chdir("./file1" [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5845] <... chdir resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5843] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5842] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5845] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5844] close(3 [pid 5843] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5842] chdir("./file0" [pid 5845] chdir("./file0" [pid 5843] chdir("./file0" [pid 5844] <... close resumed>) = 0 [pid 5844] close(4) = 0 [pid 5844] mkdir("./file1", 0777) = 0 [pid 5844] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5846] <... creat resumed>) = 5 [pid 5846] sync( [pid 5842] <... chdir resumed>) = 0 [pid 5842] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5843] <... chdir resumed>) = 0 [pid 5845] <... chdir resumed>) = 0 [pid 5843] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5842] <... openat resumed>) = 4 [ 59.027101][ T5844] loop3: detected capacity change from 0 to 1024 [ 59.039968][ T29] audit: type=1800 audit(1730647658.677:7): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5842] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5845] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5843] <... openat resumed>) = 4 [pid 5845] <... openat resumed>) = 4 [pid 5843] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5842] <... creat resumed>) = 5 [pid 5845] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5842] sync( [pid 5844] <... mount resumed>) = 0 [pid 5843] <... creat resumed>) = 5 [pid 5844] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5843] sync( [pid 5844] <... openat resumed>) = 3 [pid 5844] chdir("./file1") = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] chdir("./file0" [pid 5845] <... creat resumed>) = 5 [pid 5844] <... chdir resumed>) = 0 [pid 5845] sync( [pid 5844] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5844] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [ 59.078587][ T29] audit: type=1800 audit(1730647658.717:8): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 5844] sync( [pid 5846] <... sync resumed>) = 0 [pid 5845] <... sync resumed>) = 0 [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ [pid 5842] <... sync resumed>) = 0 [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/binderfs") = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] exit_group(0 [pid 5843] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5843] exit_group(0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5843] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] <... exit_group resumed>) = ? [pid 5843] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 59.139828][ T29] audit: type=1800 audit(1730647658.727:9): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [ 59.162196][ T29] audit: type=1800 audit(1730647658.737:10): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 5831] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./1/file1") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./1") = 0 [pid 5833] mkdir("./2", 0777) = 0 [pid 5831] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5844] <... sync resumed>) = 0 [pid 5830] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5844] exit_group(0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5844] <... exit_group resumed>) = ? [pid 5833] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5830] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5833] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5844] +++ exited with 0 +++ [pid 5833] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] getdents64(3, [pid 5829] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5831] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./1/binderfs" [pid 5829] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./1/binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... openat resumed>) = 3 [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./1/file1", [pid 5829] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5831] <... umount2 resumed>) = 0 [pid 5830] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./1/binderfs", ./strace-static-x86_64: Process 5849 attached [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./1/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] unlink("./1/binderfs" [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5849 [pid 5830] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... unlink resumed>) = 0 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./1/file1", [pid 5830] <... openat resumed>) = 4 [pid 5829] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] chdir("./2" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(4, "", [pid 5831] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(4, [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5849] <... prctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] getdents64(4, [pid 5849] setpgid(0, 0 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5849] <... setpgid resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(4, "", [pid 5830] close(4 [pid 5829] <... umount2 resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] newfstatat(AT_FDCWD, "./1/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(4, [pid 5830] rmdir("./1/file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] write(3, "1000", 4 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./1/file1", [pid 5849] <... write resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(4, [pid 5830] getdents64(3, [pid 5849] close(3 [pid 5832] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [ 59.187913][ T29] audit: type=1800 audit(1730647658.757:11): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] close(4 [pid 5830] close(3 [pid 5829] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] symlink("/dev/binderfs", "./binderfs" [pid 5832] newfstatat(4, "", [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5849] <... symlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] rmdir("./1"executing program [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] write(1, "executing program\n", 18 [pid 5832] getdents64(4, [pid 5831] rmdir("./1/file1" [pid 5830] <... rmdir resumed>) = 0 [pid 5849] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] memfd_create("syzkaller", 0 [pid 5832] getdents64(4, [pid 5830] mkdir("./2", 0777 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5849] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./1/file1" [pid 5831] getdents64(3, [pid 5829] newfstatat(4, "", [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] close(3 [pid 5829] getdents64(4, [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5849] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(3, [pid 5831] rmdir("./1" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] getdents64(4, [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] close(4 [pid 5831] mkdir("./2", 0777 [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] rmdir("./1/file1" [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5849] <... write resumed>) = 524288 [pid 5832] rmdir("./1" [pid 5831] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 5849] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] close(3 [pid 5832] mkdir("./2", 0777 [pid 5829] <... close resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 5829] rmdir("./1") = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... munmap resumed>) = 0 [pid 5829] mkdir("./2", 0777./strace-static-x86_64: Process 5850 attached [pid 5832] <... close resumed>) = 0 [pid 5850] set_robust_list(0x555557df1660, 24 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5850 [pid 5829] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5851 attached [pid 5850] <... set_robust_list resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] chdir("./2" [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] set_robust_list(0x555557df1660, 24 [pid 5850] <... chdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5851 [pid 5850] <... prctl resumed>) = 0 [pid 5850] setpgid(0, 0) = 0 [pid 5851] chdir("./2" [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... chdir resumed>) = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... openat resumed>) = 3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5852 [pid 5851] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5852 attached [pid 5851] setpgid(0, 0 [pid 5850] write(3, "1000", 4 [pid 5849] <... ioctl resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] set_robust_list(0x555557df1660, 24 [pid 5849] close(3 [pid 5829] close(3 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5851] <... setpgid resumed>) = 0 [pid 5850] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] close(3) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs" [pid 5852] chdir("./2" [pid 5851] <... openat resumed>) = 3 [pid 5850] <... symlink resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5852] <... chdir resumed>) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 5849] close(4 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... prctl resumed>) = 0 [pid 5851] write(3, "1000", 4 [pid 5852] setpgid(0, 0 [pid 5851] <... write resumed>) = 4 [pid 5852] <... setpgid resumed>) = 0 [pid 5850] write(1, "executing program\n", 18 [pid 5849] <... close resumed>) = 0 [pid 5851] close(3 [pid 5850] <... write resumed>) = 18 [pid 5851] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] memfd_create("syzkaller", 0 [pid 5849] mkdir("./file1", 0777 [pid 5851] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... openat resumed>) = 3 [pid 5851] <... symlink resumed>) = 0 [pid 5850] <... memfd_create resumed>) = 3 [pid 5849] <... mkdir resumed>) = 0 [pid 5852] write(3, "1000", 4) = 4 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] close(3) = 0 [pid 5850] <... mmap resumed>) = 0x7fd6d9800000 [pid 5849] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, ""./strace-static-x86_64: Process 5853 attached [pid 5852] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5851] write(1, "executing program\n", 18 [pid 5852] write(1, "executing program\n", 18 [pid 5853] set_robust_list(0x555557df1660, 24 [pid 5852] <... write resumed>) = 18 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5853] chdir("./2" [pid 5852] memfd_create("syzkaller", 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5853 executing program [pid 5853] <... chdir resumed>) = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... memfd_create resumed>) = 3 [pid 5851] <... write resumed>) = 18 [pid 5853] <... prctl resumed>) = 0 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5853] setpgid(0, 0 [pid 5852] <... mmap resumed>) = 0x7fd6d9800000 [pid 5851] memfd_create("syzkaller", 0 [pid 5853] <... setpgid resumed>) = 0 [pid 5851] <... memfd_create resumed>) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5849] <... mount resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5853] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5849] chdir("./file1") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] chdir("./file0" [pid 5853] write(3, "1000", 4 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5853] <... write resumed>) = 4 [pid 5853] close(3 [pid 5849] <... chdir resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs" [pid 5849] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5853] <... symlink resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [ 59.299962][ T5849] loop4: detected capacity change from 0 to 1024 executing program [pid 5853] write(1, "executing program\n", 18) = 18 [pid 5853] memfd_create("syzkaller", 0) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5850] <... write resumed>) = 524288 [pid 5849] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5850] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5852] <... write resumed>) = 524288 [pid 5851] <... write resumed>) = 524288 [pid 5849] <... creat resumed>) = 5 [pid 5849] sync( [pid 5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5853] <... write resumed>) = 524288 [pid 5852] munmap(0x7fd6d9800000, 138412032 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5853] munmap(0x7fd6d9800000, 138412032 [pid 5852] <... munmap resumed>) = 0 [pid 5853] <... munmap resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... openat resumed>) = 4 [pid 5853] <... openat resumed>) = 4 [pid 5852] ioctl(4, LOOP_SET_FD, 3 [pid 5853] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3) = 0 [pid 5850] close(4) = 0 [pid 5850] mkdir("./file1", 0777) = 0 [pid 5850] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5851] <... ioctl resumed>) = 0 [pid 5853] <... ioctl resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5853] close(3 [pid 5852] close(3 [pid 5851] close(3 [pid 5852] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5852] close(4 [pid 5851] <... close resumed>) = 0 [pid 5853] close(4 [pid 5852] <... close resumed>) = 0 [pid 5851] close(4 [pid 5850] <... mount resumed>) = 0 [pid 5849] <... sync resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5852] mkdir("./file1", 0777 [pid 5851] mkdir("./file1", 0777 [pid 5853] mkdir("./file1", 0777 [pid 5852] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5849] exit_group(0 [pid 5853] <... mkdir resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... exit_group resumed>) = ? [pid 5851] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5853] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5852] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5850] chdir("./file1" [pid 5849] +++ exited with 0 +++ [pid 5850] <... chdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5850] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... restart_syscall resumed>) = 0 [ 59.393947][ T5850] loop1: detected capacity change from 0 to 1024 [ 59.402084][ T5851] loop3: detected capacity change from 0 to 1024 [ 59.413637][ T5852] loop2: detected capacity change from 0 to 1024 [ 59.420291][ T5853] loop0: detected capacity change from 0 to 1024 [pid 5851] <... mount resumed>) = 0 [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] chdir("./file0" [pid 5851] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5853] <... mount resumed>) = 0 [pid 5851] chdir("./file1" [pid 5833] <... openat resumed>) = 3 [pid 5853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5851] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5850] <... chdir resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5853] chdir("./file1" [pid 5850] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5853] <... chdir resumed>) = 0 [pid 5851] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] chdir("./file0" [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] chdir("./file0" [pid 5850] <... openat resumed>) = 4 [pid 5833] unlink("./2/binderfs") = 0 [pid 5853] <... chdir resumed>) = 0 [pid 5852] <... mount resumed>) = 0 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5852] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5853] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5852] <... openat resumed>) = 3 [pid 5851] <... chdir resumed>) = 0 [pid 5850] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = 0 [pid 5852] chdir("./file1") = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] chdir("./file0" [pid 5851] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5853] <... creat resumed>) = 5 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... chdir resumed>) = 0 [pid 5851] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5850] <... creat resumed>) = 5 [pid 5833] <... openat resumed>) = 4 [pid 5853] sync( [pid 5852] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] newfstatat(4, "", [pid 5850] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5852] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5851] <... creat resumed>) = 5 [pid 5851] sync( [pid 5852] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./2/file1" [pid 5853] <... sync resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5850] <... sync resumed>) = 0 [pid 5853] exit_group(0 [pid 5850] exit_group(0 [pid 5853] <... exit_group resumed>) = ? [pid 5850] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./2") = 0 [pid 5833] mkdir("./3", 0777 [pid 5853] +++ exited with 0 +++ [pid 5852] <... creat resumed>) = 5 [pid 5851] <... sync resumed>) = 0 [pid 5850] +++ exited with 0 +++ [pid 5852] sync( [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5851] exit_group(0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] <... mkdir resumed>) = 0 [pid 5851] <... exit_group resumed>) = ? [pid 5851] +++ exited with 0 +++ [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5830] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... ioctl resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./2/binderfs") = 0 [pid 5829] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5832] <... restart_syscall resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5852] <... sync resumed>) = 0 [pid 5852] exit_group(0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5854 [pid 5852] <... exit_group resumed>) = ? [pid 5830] getdents64(3, [pid 5832] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] <... set_robust_list resumed>) = 0 [pid 5854] chdir("./3") = 0 [pid 5852] +++ exited with 0 +++ [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(3, "", [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] newfstatat(AT_FDCWD, "./2/file1", [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] unlink("./2/binderfs" [pid 5829] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] setpgid(0, 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... setpgid resumed>) = 0 [pid 5832] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5854] <... openat resumed>) = 3 [pid 5829] newfstatat(4, "", [pid 5854] write(3, "1000", 4 [pid 5832] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] <... write resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5854] close(3 [pid 5832] unlink("./2/binderfs" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5854] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(AT_FDCWD, "./2/file1", [pid 5829] getdents64(4, [pid 5854] symlink("/dev/binderfs", "./binderfs" [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5854] <... symlink resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5830] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4executing program [pid 5854] write(1, "executing program\n", 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5854] <... write resumed>) = 18 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] memfd_create("syzkaller", 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./2/file1" [pid 5854] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 5854] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] newfstatat(AT_FDCWD, "./2/file1", [pid 5831] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5830] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(3, [pid 5830] getdents64(4, [pid 5832] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(4, "", [pid 5830] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] unlink("./2/binderfs" [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, [pid 5830] rmdir("./2/file1" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 5832] getdents64(4, [pid 5830] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5829] rmdir("./2" [pid 5832] rmdir("./2/file1" [pid 5831] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./3", 0777) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] rmdir("./2" [pid 5854] <... write resumed>) = 524288 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] mkdir("./3", 0777 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(AT_FDCWD, "./2/file1", [pid 5832] close(3 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] rmdir("./2" [pid 5831] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... ioctl resumed>) = 0 [pid 5832] mkdir("./3", 0777 [pid 5831] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... ioctl resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] close(3 [pid 5829] close(3 [pid 5854] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5854] <... munmap resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5854] ioctl(4, LOOP_SET_FD, 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] getdents64(4, [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached ./strace-static-x86_64: Process 5855 attached [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5856] set_robust_list(0x555557df1660, 24 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] getdents64(4, [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5855 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5856 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5831] close(4 [pid 5855] set_robust_list(0x555557df1660, 24 [pid 5831] <... close resumed>) = 0 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5856] chdir("./3") = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 5831] rmdir("./2/file1" [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "1000", 4) = 4 executing program [pid 5856] close(3 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5856] write(1, "executing program\n", 18) = 18 [pid 5856] memfd_create("syzkaller", 0) = 3 [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5855] chdir("./3" [pid 5831] getdents64(3, [pid 5855] <... chdir resumed>) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... ioctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5855] <... prctl resumed>) = 0 [pid 5831] close(3 [pid 5855] setpgid(0, 0 [pid 5854] close(3 [pid 5831] <... close resumed>) = 0 [pid 5855] <... setpgid resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5831] rmdir("./2" [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] close(4 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5855] write(3, "1000", 4 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] mkdir("./3", 0777 [pid 5855] <... write resumed>) = 4 [pid 5854] mkdir("./file1", 0777./strace-static-x86_64: Process 5857 attached [pid 5855] close(3 [pid 5854] <... mkdir resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5854] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5857] set_robust_list(0x555557df1660, 24 [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5857 [pid 5831] <... mkdir resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5855] <... symlink resumed>) = 0 [pid 5857] chdir("./3" [pid 5855] write(1, "executing program\n", 18 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... write resumed>) = 524288 executing program [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] <... write resumed>) = 18 [pid 5831] <... openat resumed>) = 3 [pid 5857] <... prctl resumed>) = 0 [pid 5855] memfd_create("syzkaller", 0 [pid 5857] setpgid(0, 0 [pid 5855] <... memfd_create resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5857] <... setpgid resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] close(3 [pid 5857] <... openat resumed>) = 3 [pid 5854] <... mount resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file1") = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5854] chdir("./file0" [pid 5857] write(3, "1000", 4 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... close resumed>) = 0 [pid 5857] <... write resumed>) = 4 [pid 5856] munmap(0x7fd6d9800000, 138412032 [pid 5855] <... mmap resumed>) = 0x7fd6d9800000 [pid 5854] <... chdir resumed>) = 0 [pid 5857] close(3 [pid 5856] <... munmap resumed>) = 0 [ 59.641242][ T5854] loop4: detected capacity change from 0 to 1024 [pid 5857] <... close resumed>) = 0 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5854] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5856] <... openat resumed>) = 4 [pid 5854] <... openat resumed>) = 4 [pid 5856] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5854] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 5858 attached [pid 5857] <... symlink resumed>) = 0 [pid 5855] <... write resumed>) = 524288 executing program [pid 5858] set_robust_list(0x555557df1660, 24 [pid 5857] write(1, "executing program\n", 18 [pid 5855] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5858 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] <... write resumed>) = 18 [pid 5854] <... creat resumed>) = 5 [pid 5854] sync( [pid 5857] memfd_create("syzkaller", 0 [pid 5858] chdir("./3") = 0 [pid 5857] <... memfd_create resumed>) = 3 [pid 5856] close(3 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5858] <... prctl resumed>) = 0 [pid 5857] <... mmap resumed>) = 0x7fd6d9800000 [pid 5856] <... close resumed>) = 0 [pid 5855] <... munmap resumed>) = 0 [pid 5858] setpgid(0, 0 [pid 5856] close(4) = 0 [pid 5856] mkdir("./file1", 0777) = 0 [pid 5858] <... setpgid resumed>) = 0 [pid 5856] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5855] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5855] <... openat resumed>) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3 [pid 5858] <... openat resumed>) = 3 [pid 5858] write(3, "1000", 4) = 4 [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5856] <... mount resumed>) = 0 [pid 5855] <... ioctl resumed>) = 0 [pid 5858] close(3 [pid 5855] close(3 [pid 5856] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5855] <... close resumed>) = 0 [pid 5855] close(4) = 0 [pid 5857] <... write resumed>) = 524288 [pid 5855] mkdir("./file1", 0777 [pid 5858] <... close resumed>) = 0 [pid 5857] munmap(0x7fd6d9800000, 138412032 [pid 5856] <... openat resumed>) = 3 [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] <... munmap resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5854] <... sync resumed>) = 0 [pid 5856] chdir("./file1" [pid 5858] <... symlink resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5856] <... chdir resumed>) = 0 [pid 5855] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5854] exit_group(0 [pid 5858] write(1, "executing program\n", 18 [pid 5857] <... openat resumed>) = 4 executing program [pid 5856] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5854] <... exit_group resumed>) = ? [pid 5858] <... write resumed>) = 18 [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 5856] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] +++ exited with 0 +++ [pid 5858] memfd_create("syzkaller", 0 [pid 5856] chdir("./file0" [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5858] <... memfd_create resumed>) = 3 [ 59.705562][ T5856] loop0: detected capacity change from 0 to 1024 [ 59.735756][ T5855] loop1: detected capacity change from 0 to 1024 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5855] <... mount resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5855] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] newfstatat(3, "", [pid 5857] <... ioctl resumed>) = 0 [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5855] <... openat resumed>) = 3 [pid 5855] chdir("./file1" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5856] <... chdir resumed>) = 0 [pid 5855] <... chdir resumed>) = 0 [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5855] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] close(3 [pid 5858] <... write resumed>) = 524288 [pid 5857] <... close resumed>) = 0 [pid 5856] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5855] <... chdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5858] munmap(0x7fd6d9800000, 138412032 [pid 5857] close(4 [pid 5855] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5857] <... close resumed>) = 0 [pid 5856] <... openat resumed>) = 4 [pid 5855] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5858] <... munmap resumed>) = 0 [pid 5857] mkdir("./file1", 0777 [pid 5855] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] unlink("./3/binderfs" [pid 5857] <... mkdir resumed>) = 0 [pid 5856] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... unlink resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5857] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 5856] <... creat resumed>) = 5 [pid 5855] <... creat resumed>) = 5 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5855] sync( [pid 5856] sync( [pid 5858] <... ioctl resumed>) = 0 [pid 5857] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5857] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file1") = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5858] close(3) = 0 [pid 5857] chdir("./file0" [pid 5858] close(4) = 0 [pid 5858] mkdir("./file1", 0777) = 0 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5856] <... sync resumed>) = 0 [pid 5855] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] <... chdir resumed>) = 0 [pid 5856] exit_group(0 [pid 5857] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5856] <... exit_group resumed>) = ? [ 59.765325][ T5857] loop3: detected capacity change from 0 to 1024 [ 59.798623][ T5858] loop2: detected capacity change from 0 to 1024 [pid 5857] <... openat resumed>) = 4 [pid 5856] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5858] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5855] exit_group(0 [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5855] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5855] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5858] <... mount resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5858] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5857] <... creat resumed>) = 5 [pid 5829] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5858] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] close(4) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] rmdir("./3/file1" [pid 5829] <... openat resumed>) = 3 [pid 5830] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5858] chdir("./file1" [pid 5833] getdents64(3, [pid 5858] <... chdir resumed>) = 0 [pid 5857] sync( [pid 5830] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5858] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] close(3 [pid 5830] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5829] getdents64(3, [pid 5858] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... close resumed>) = 0 [pid 5858] chdir("./file0" [pid 5833] rmdir("./3" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] unlink("./3/binderfs" [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] mkdir("./4", 0777 [pid 5858] <... chdir resumed>) = 0 [pid 5830] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... mkdir resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5858] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5858] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] unlink("./3/binderfs") = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5829] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached [pid 5858] <... creat resumed>) = 5 [pid 5830] <... umount2 resumed>) = 0 [pid 5859] set_robust_list(0x555557df1660, 24 [pid 5858] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5859 [pid 5830] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5829] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5859] chdir("./4" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] <... chdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./3/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] newfstatat(AT_FDCWD, "./3/file1", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5859] <... prctl resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5859] setpgid(0, 0 [pid 5857] <... sync resumed>) = 0 [pid 5830] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 5857] exit_group(0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] <... setpgid resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] getdents64(4, [pid 5829] <... openat resumed>) = 4 [pid 5857] <... exit_group resumed>) = ? [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5859] <... openat resumed>) = 3 [pid 5829] newfstatat(4, "", [pid 5859] write(3, "1000", 4 [pid 5858] <... sync resumed>) = 0 [pid 5857] +++ exited with 0 +++ [pid 5830] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5858] exit_group(0 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(4, [pid 5859] <... write resumed>) = 4 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] rmdir("./3/file1" [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... rmdir resumed>) = 0 [pid 5859] close(3 [pid 5858] <... exit_group resumed>) = ? [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./3") = 0 [pid 5830] mkdir("./4", 0777executing program ) = 0 [pid 5859] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5859] symlink("/dev/binderfs", "./binderfs" [pid 5858] +++ exited with 0 +++ [pid 5829] getdents64(4, [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5859] <... symlink resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5859] write(1, "executing program\n", 18 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5859] <... write resumed>) = 18 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] memfd_create("syzkaller", 0 [pid 5831] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5859] <... memfd_create resumed>) = 3 [pid 5832] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./3/file1" [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5832] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5859] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... openat resumed>) = 3 [pid 5831] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5832] getdents64(3, [pid 5831] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5829] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5831] unlink("./3/binderfs" [pid 5829] rmdir("./3" [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] unlink("./3/binderfs" [pid 5831] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] mkdir("./4", 0777 [pid 5832] <... unlink resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5860 attached ) = 3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5860 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached [pid 5860] set_robust_list(0x555557df1660, 24) = 0 [pid 5860] chdir("./4") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5860] setpgid(0, 0) = 0 [pid 5861] set_robust_list(0x555557df1660, 24 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5861] <... set_robust_list resumed>) = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5861 [pid 5861] chdir("./4" [pid 5831] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5860] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./3/file1", [pid 5861] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5860] write(3, "1000", 4 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... prctl resumed>) = 0 [pid 5860] <... write resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] setpgid(0, 0 [pid 5860] close(3 [pid 5832] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5860] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] <... setpgid resumed>) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs" [pid 5831] newfstatat(AT_FDCWD, "./3/file1", [pid 5860] <... symlink resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5861] <... openat resumed>) = 3 [pid 5859] <... write resumed>) = 524288 [pid 5832] newfstatat(4, "", executing program executing program [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5861] write(3, "1000", 4 [pid 5860] write(1, "executing program\n", 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5861] <... write resumed>) = 4 [pid 5860] <... write resumed>) = 18 [pid 5831] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5861] close(3 [pid 5860] memfd_create("syzkaller", 0 [pid 5832] getdents64(4, [pid 5831] <... openat resumed>) = 4 [pid 5861] <... close resumed>) = 0 [pid 5860] <... memfd_create resumed>) = 3 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(4, "", [pid 5861] write(1, "executing program\n", 18 [pid 5860] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(4, [pid 5861] <... write resumed>) = 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5861] memfd_create("syzkaller", 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5861] <... memfd_create resumed>) = 3 [pid 5832] close(4 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... close resumed>) = 0 [pid 5861] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] rmdir("./3/file1" [pid 5831] getdents64(4, [pid 5832] <... rmdir resumed>) = 0 [pid 5859] munmap(0x7fd6d9800000, 138412032 [pid 5832] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./3") = 0 [pid 5831] getdents64(4, [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5859] <... munmap resumed>) = 0 [pid 5832] mkdir("./4", 0777 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... mkdir resumed>) = 0 [pid 5831] close(4 [pid 5859] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./3/file1" [pid 5860] <... write resumed>) = 524288 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] getdents64(3, [pid 5832] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5860] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5860] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5861] <... write resumed>) = 524288 [pid 5859] <... ioctl resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5860] <... openat resumed>) = 4 [pid 5831] rmdir("./3" [pid 5861] munmap(0x7fd6d9800000, 138412032 [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5859] close(3./strace-static-x86_64: Process 5862 attached [pid 5831] <... rmdir resumed>) = 0 [pid 5862] set_robust_list(0x555557df1660, 24 [pid 5861] <... munmap resumed>) = 0 [pid 5860] <... ioctl resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5862 [pid 5859] <... close resumed>) = 0 [pid 5831] mkdir("./4", 0777 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5860] close(3 [pid 5859] close(4 [pid 5831] <... mkdir resumed>) = 0 [pid 5862] chdir("./4" [pid 5861] <... openat resumed>) = 4 [pid 5860] <... close resumed>) = 0 [pid 5859] <... close resumed>) = 0 [pid 5860] close(4 [pid 5859] mkdir("./file1", 0777 [pid 5862] <... chdir resumed>) = 0 [pid 5861] ioctl(4, LOOP_SET_FD, 3 [pid 5860] <... close resumed>) = 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5862] setpgid(0, 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5862] <... setpgid resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] close(3 [pid 5862] <... openat resumed>) = 3 [pid 5860] mkdir("./file1", 0777 [pid 5862] write(3, "1000", 4 [pid 5859] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... close resumed>) = 0 [pid 5862] <... write resumed>) = 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached [pid 5862] close(3 [pid 5860] <... mkdir resumed>) = 0 executing program [pid 5862] <... close resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5863 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18 [pid 5860] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5862] <... write resumed>) = 18 [pid 5862] memfd_create("syzkaller", 0 [pid 5863] set_robust_list(0x555557df1660, 24) = 0 [pid 5862] <... memfd_create resumed>) = 3 [pid 5863] chdir("./4" [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5863] <... chdir resumed>) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5862] <... mmap resumed>) = 0x7fd6d9800000 [pid 5863] <... prctl resumed>) = 0 [pid 5863] setpgid(0, 0 [pid 5859] <... mount resumed>) = 0 [pid 5863] <... setpgid resumed>) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5863] <... openat resumed>) = 3 [pid 5861] <... ioctl resumed>) = 0 [pid 5863] write(3, "1000", 4 [pid 5861] close(3 [pid 5863] <... write resumed>) = 4 [pid 5861] <... close resumed>) = 0 [pid 5863] close(3 [pid 5861] close(4 [pid 5863] <... close resumed>) = 0 [pid 5861] <... close resumed>) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5861] mkdir("./file1", 0777 [pid 5863] <... symlink resumed>) = 0 [pid 5861] <... mkdir resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORYexecuting program [pid 5863] write(1, "executing program\n", 18 [pid 5861] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5859] <... openat resumed>) = 3 [pid 5863] <... write resumed>) = 18 [pid 5863] memfd_create("syzkaller", 0 [pid 5859] chdir("./file1" [pid 5863] <... memfd_create resumed>) = 3 [pid 5860] <... mount resumed>) = 0 [ 60.024472][ T5859] loop4: detected capacity change from 0 to 1024 [ 60.050307][ T5860] loop1: detected capacity change from 0 to 1024 [ 60.067063][ T5861] loop0: detected capacity change from 0 to 1024 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5860] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5859] <... chdir resumed>) = 0 [pid 5862] <... write resumed>) = 524288 [pid 5860] <... openat resumed>) = 3 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5859] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5859] chdir("./file0" [pid 5861] <... mount resumed>) = 0 [pid 5861] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5861] chdir("./file1") = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5861] chdir("./file0" [pid 5860] chdir("./file1" [pid 5859] <... chdir resumed>) = 0 [pid 5860] <... chdir resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5862] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5859] <... openat resumed>) = 4 [pid 5860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5859] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5860] chdir("./file0" [pid 5862] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5861] <... chdir resumed>) = 0 [pid 5860] <... chdir resumed>) = 0 [pid 5859] <... creat resumed>) = 5 [pid 5861] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5863] <... write resumed>) = 524288 [pid 5859] sync( [pid 5860] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5861] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5863] munmap(0x7fd6d9800000, 138412032 [pid 5860] <... openat resumed>) = 4 [pid 5860] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5863] <... munmap resumed>) = 0 [pid 5861] <... creat resumed>) = 5 [pid 5863] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5861] sync( [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5860] <... creat resumed>) = 5 [pid 5860] sync( [pid 5862] <... ioctl resumed>) = 0 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] mkdir("./file1", 0777) = 0 [pid 5863] <... ioctl resumed>) = 0 [pid 5862] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5861] <... sync resumed>) = 0 [pid 5859] <... sync resumed>) = 0 [pid 5861] exit_group(0 [pid 5859] exit_group(0 [pid 5863] close(3 [pid 5861] <... exit_group resumed>) = ? [pid 5859] <... exit_group resumed>) = ? [pid 5863] <... close resumed>) = 0 [pid 5862] <... mount resumed>) = 0 [pid 5860] <... sync resumed>) = 0 [pid 5863] close(4 [pid 5860] exit_group(0 [pid 5863] <... close resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5861] +++ exited with 0 +++ [pid 5860] <... exit_group resumed>) = ? [pid 5863] mkdir("./file1", 0777 [pid 5862] <... openat resumed>) = 3 [pid 5860] +++ exited with 0 +++ [pid 5859] +++ exited with 0 +++ [pid 5863] <... mkdir resumed>) = 0 [pid 5862] chdir("./file1" [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5862] <... chdir resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5862] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... restart_syscall resumed>) = 0 [ 60.141789][ T5862] loop3: detected capacity change from 0 to 1024 [ 60.161507][ T5863] loop2: detected capacity change from 0 to 1024 [pid 5863] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5862] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, [pid 5830] <... openat resumed>) = 3 [pid 5829] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5863] <... mount resumed>) = 0 [pid 5862] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5862] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5863] <... openat resumed>) = 3 [pid 5862] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 5863] chdir("./file1" [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5830] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5863] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] getdents64(3, [pid 5863] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] unlink("./4/binderfs" [pid 5830] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5863] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... unlink resumed>) = 0 [pid 5863] chdir("./file0" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./4/binderfs" [pid 5829] unlink("./4/binderfs" [pid 5863] <... chdir resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5863] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5862] <... creat resumed>) = 5 [pid 5830] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 5863] <... openat resumed>) = 4 [pid 5862] sync( [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/file1", [pid 5829] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./4/file1", [pid 5863] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./4/file1", [pid 5829] newfstatat(4, "", [pid 5833] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5830] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5863] <... creat resumed>) = 5 [pid 5833] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5863] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, [pid 5862] <... sync resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5863] <... sync resumed>) = 0 [pid 5862] exit_group(0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5863] exit_group(0 [pid 5862] <... exit_group resumed>) = ? [pid 5833] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5863] <... exit_group resumed>) = ? [pid 5862] +++ exited with 0 +++ [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5829] close(4 [pid 5833] close(4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... close resumed>) = 0 [pid 5863] +++ exited with 0 +++ [pid 5833] <... close resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] getdents64(4, [pid 5829] rmdir("./4/file1" [pid 5833] rmdir("./4/file1" [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] close(4) = 0 [pid 5829] getdents64(3, [pid 5831] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./4/file1" [pid 5831] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./4" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5830] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(3, [pid 5830] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] mkdir("./5", 0777 [pid 5833] close(3 [pid 5832] <... openat resumed>) = 3 [pid 5831] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./4" [pid 5833] rmdir("./4" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5830] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] mkdir("./5", 0777 [pid 5833] mkdir("./5", 0777 [pid 5832] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./4/binderfs" [pid 5830] <... mkdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(3 [pid 5832] unlink("./4/binderfs" [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... unlink resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... close resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5833] close(3 [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] newfstatat(AT_FDCWD, "./4/file1", ./strace-static-x86_64: Process 5864 attached [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5864 ./strace-static-x86_64: Process 5865 attached [pid 5864] set_robust_list(0x555557df1660, 24 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] set_robust_list(0x555557df1660, 24 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5866 attached [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5865 [pid 5866] set_robust_list(0x555557df1660, 24) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5866 [pid 5866] chdir("./5" [pid 5865] <... set_robust_list resumed>) = 0 [pid 5864] chdir("./5" [pid 5832] newfstatat(AT_FDCWD, "./4/file1", [pid 5831] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5865] chdir("./5" [pid 5831] <... openat resumed>) = 4 [pid 5864] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5865] <... chdir resumed>) = 0 [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... prctl resumed>) = 0 [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5864] setpgid(0, 0 [pid 5832] <... openat resumed>) = 4 [pid 5864] <... setpgid resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5865] <... prctl resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] newfstatat(4, "", [pid 5831] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, [pid 5831] close(4 [pid 5866] <... chdir resumed>) = 0 [pid 5865] setpgid(0, 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./4/file1" [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... openat resumed>) = 3 [pid 5866] <... prctl resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5866] setpgid(0, 0 [pid 5865] <... setpgid resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(3, [pid 5864] write(3, "1000", 4 [pid 5866] <... setpgid resumed>) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] <... write resumed>) = 4 [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5864] close(3 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5864] <... close resumed>) = 0 [pid 5832] close(4 [pid 5864] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5866] <... openat resumed>) = 3 [pid 5865] <... openat resumed>) = 3 [pid 5864] <... symlink resumed>) = 0 [pid 5832] rmdir("./4/file1" [pid 5831] rmdir("./4" [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5866] write(1, "executing program\n", 18executing program ) = 18 [pid 5832] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5866] memfd_create("syzkaller", 0executing program [pid 5865] write(3, "1000", 4 [pid 5864] write(1, "executing program\n", 18 [pid 5866] <... memfd_create resumed>) = 3 [pid 5865] <... write resumed>) = 4 [pid 5864] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] mkdir("./5", 0777 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5864] memfd_create("syzkaller", 0 [pid 5832] close(3 [pid 5866] <... mmap resumed>) = 0x7fd6d9800000 [pid 5865] close(3 [pid 5864] <... memfd_create resumed>) = 3 [pid 5831] <... mkdir resumed>) = 0 [pid 5865] <... close resumed>) = 0 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... close resumed>) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs" [pid 5864] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] rmdir("./4" [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5865] <... symlink resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 executing program [pid 5866] <... write resumed>) = 524288 [pid 5865] write(1, "executing program\n", 18 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] mkdir("./5", 0777 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5866] munmap(0x7fd6d9800000, 138412032 [pid 5865] <... write resumed>) = 18 [pid 5831] <... openat resumed>) = 3 [pid 5865] memfd_create("syzkaller", 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5865] <... memfd_create resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] close(3 [pid 5866] <... munmap resumed>) = 0 [pid 5865] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5866] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5832] <... ioctl resumed>) = 0 [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5832] close(3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... close resumed>) = 0 ./strace-static-x86_64: Process 5867 attached [pid 5864] <... write resumed>) = 524288 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5864] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5868 ./strace-static-x86_64: Process 5868 attached [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5867 [pid 5867] set_robust_list(0x555557df1660, 24 [pid 5864] <... munmap resumed>) = 0 [pid 5868] set_robust_list(0x555557df1660, 24 [pid 5867] <... set_robust_list resumed>) = 0 [pid 5866] <... ioctl resumed>) = 0 [pid 5865] <... write resumed>) = 524288 [pid 5864] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5868] <... set_robust_list resumed>) = 0 [pid 5868] chdir("./5" [pid 5867] chdir("./5" [pid 5866] close(3 [pid 5865] munmap(0x7fd6d9800000, 138412032 [pid 5864] <... openat resumed>) = 4 [pid 5868] <... chdir resumed>) = 0 [pid 5866] <... close resumed>) = 0 [pid 5865] <... munmap resumed>) = 0 [pid 5864] ioctl(4, LOOP_SET_FD, 3 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5867] <... chdir resumed>) = 0 [pid 5866] close(4 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] <... prctl resumed>) = 0 [pid 5867] setpgid(0, 0 [pid 5866] <... close resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5868] setpgid(0, 0 [pid 5867] <... setpgid resumed>) = 0 [pid 5866] mkdir("./file1", 0777 [pid 5865] <... openat resumed>) = 4 [pid 5868] <... setpgid resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5866] <... mkdir resumed>) = 0 [pid 5865] ioctl(4, LOOP_SET_FD, 3executing program [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5866] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5865] <... ioctl resumed>) = 0 [pid 5867] <... openat resumed>) = 3 [pid 5868] <... openat resumed>) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] write(1, "executing program\n", 18) = 18 [pid 5868] memfd_create("syzkaller", 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5868] <... memfd_create resumed>) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5864] close(3 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5864] <... close resumed>) = 0 [pid 5867] write(3, "1000", 4 [pid 5865] close(3 [pid 5864] close(4 [pid 5865] <... close resumed>) = 0 [pid 5864] <... close resumed>) = 0 [pid 5867] <... write resumed>) = 4 [pid 5865] close(4 [pid 5864] mkdir("./file1", 0777) = 0 [pid 5864] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5865] <... close resumed>) = 0 [pid 5867] close(3 [pid 5866] <... mount resumed>) = 0 [pid 5865] mkdir("./file1", 0777 [pid 5867] <... close resumed>) = 0 [pid 5865] <... mkdir resumed>) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5866] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5867] write(1, "executing program\n", 18) = 18 [pid 5866] <... openat resumed>) = 3 [pid 5867] memfd_create("syzkaller", 0 [pid 5866] chdir("./file1" [pid 5867] <... memfd_create resumed>) = 3 [pid 5866] <... chdir resumed>) = 0 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5867] <... mmap resumed>) = 0x7fd6d9800000 [pid 5866] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5866] chdir("./file0" [pid 5868] <... write resumed>) = 524288 [pid 5868] munmap(0x7fd6d9800000, 138412032 [ 60.446908][ T5866] loop4: detected capacity change from 0 to 1024 [ 60.464543][ T5864] loop1: detected capacity change from 0 to 1024 [ 60.475264][ T5865] loop0: detected capacity change from 0 to 1024 [pid 5865] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5868] <... munmap resumed>) = 0 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5866] <... chdir resumed>) = 0 [pid 5864] <... mount resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5868] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5866] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5864] <... openat resumed>) = 3 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5864] chdir("./file1") = 0 [pid 5867] <... write resumed>) = 524288 [pid 5866] <... openat resumed>) = 4 [pid 5864] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5865] <... mount resumed>) = 0 [pid 5864] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5864] chdir("./file0" [pid 5865] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5866] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5865] <... openat resumed>) = 3 [pid 5865] chdir("./file1" [pid 5864] <... chdir resumed>) = 0 [pid 5865] <... chdir resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5864] <... openat resumed>) = 4 [pid 5865] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5865] chdir("./file0" [pid 5864] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5868] <... ioctl resumed>) = 0 [pid 5867] munmap(0x7fd6d9800000, 138412032 [pid 5865] <... chdir resumed>) = 0 [pid 5868] close(3 [pid 5867] <... munmap resumed>) = 0 [pid 5866] <... creat resumed>) = 5 [pid 5865] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5864] <... creat resumed>) = 5 [pid 5868] <... close resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5866] sync( [pid 5868] close(4 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 5865] <... openat resumed>) = 4 [pid 5864] sync( [pid 5868] <... close resumed>) = 0 [pid 5868] mkdir("./file1", 0777 [pid 5865] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5868] <... mkdir resumed>) = 0 [pid 5868] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5867] <... ioctl resumed>) = 0 [pid 5865] <... creat resumed>) = 5 [pid 5867] close(3 [pid 5865] sync( [pid 5867] <... close resumed>) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file1", 0777) = 0 [pid 5867] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5868] <... mount resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file1") = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] chdir("./file0" [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file1") = 0 [pid 5868] <... chdir resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5866] <... sync resumed>) = 0 [pid 5864] <... sync resumed>) = 0 [ 60.546647][ T5868] loop3: detected capacity change from 0 to 1024 [ 60.581994][ T5867] loop2: detected capacity change from 0 to 1024 [pid 5867] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5866] exit_group(0 [pid 5864] exit_group(0 [pid 5867] chdir("./file0" [pid 5866] <... exit_group resumed>) = ? [pid 5864] <... exit_group resumed>) = ? [pid 5866] +++ exited with 0 +++ [pid 5868] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5867] <... chdir resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5868] <... openat resumed>) = 4 [pid 5867] <... openat resumed>) = 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5868] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5867] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5865] <... sync resumed>) = 0 [pid 5864] +++ exited with 0 +++ [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5865] <... exit_group resumed>) = ? [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] +++ exited with 0 +++ [pid 5833] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] <... creat resumed>) = 5 [pid 5867] <... creat resumed>) = 5 [pid 5833] newfstatat(3, "", [pid 5830] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] <... openat resumed>) = 3 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5830] newfstatat(3, "", [pid 5867] sync( [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5868] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] unlink("./5/binderfs" [pid 5830] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... unlink resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5829] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] unlink("./5/binderfs" [pid 5829] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5830] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] unlink("./5/binderfs") = 0 [pid 5829] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] <... sync resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] exit_group(0 [pid 5830] newfstatat(AT_FDCWD, "./5/file1", [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5868] <... exit_group resumed>) = ? [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5867] <... sync resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5867] exit_group(0) = ? [pid 5829] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5868] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/file1", [pid 5830] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5830] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5867] +++ exited with 0 +++ [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] newfstatat(4, "", [pid 5829] newfstatat(AT_FDCWD, "./5/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] getdents64(4, [pid 5829] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(4, "", [pid 5832] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(4 [pid 5829] newfstatat(4, "", [pid 5833] getdents64(4, [pid 5832] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./5/file1" [pid 5833] getdents64(4, [pid 5831] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5829] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(3, [pid 5831] <... openat resumed>) = 3 [pid 5829] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5832] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5829] close(4 [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] rmdir("./5/file1" [pid 5832] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5831] getdents64(3, [pid 5830] close(3 [pid 5829] rmdir("./5/file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5831] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] rmdir("./5" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(3 [pid 5831] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./5" [pid 5832] unlink("./5/binderfs" [pid 5829] getdents64(3, [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] unlink("./5/binderfs" [pid 5830] mkdir("./6", 0777 [pid 5833] mkdir("./6", 0777) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./5" [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./6", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5832] newfstatat(AT_FDCWD, "./5/file1", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... mkdir resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./5/file1", [pid 5830] close(3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] close(3) = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5869 attached [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5869 [pid 5832] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(3 [pid 5832] newfstatat(4, "", [pid 5831] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5870 attached [pid 5869] set_robust_list(0x555557df1660, 24 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(4, "", [pid 5829] <... close resumed>) = 0 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5870] set_robust_list(0x555557df1660, 24 [pid 5869] chdir("./6" [pid 5832] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5870 [pid 5869] <... chdir resumed>) = 0 [pid 5870] <... set_robust_list resumed>) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5870] chdir("./6" [pid 5869] <... prctl resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5870] <... chdir resumed>) = 0 [pid 5869] setpgid(0, 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5869] <... setpgid resumed>) = 0 [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5871] set_robust_list(0x555557df1660, 24 [pid 5870] <... prctl resumed>) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... close resumed>) = 0 [pid 5831] close(4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5871 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5870] setpgid(0, 0 [pid 5869] <... openat resumed>) = 3 [pid 5832] rmdir("./5/file1" [pid 5831] <... close resumed>) = 0 [pid 5871] chdir("./6" [pid 5870] <... setpgid resumed>) = 0 [pid 5869] write(3, "1000", 4 [pid 5871] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5869] <... write resumed>) = 4 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./5/file1" [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] <... openat resumed>) = 3 [pid 5869] close(3 [pid 5871] <... prctl resumed>) = 0 [pid 5870] write(3, "1000", 4 [pid 5869] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5871] setpgid(0, 0 [pid 5870] <... write resumed>) = 4 [pid 5869] symlink("/dev/binderfs", "./binderfs" [pid 5832] getdents64(3, [pid 5871] <... setpgid resumed>) = 0 [pid 5870] close(3 [pid 5869] <... symlink resumed>) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] <... close resumed>) = 0 executing program [pid 5869] write(1, "executing program\n", 18 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(3, [pid 5870] symlink("/dev/binderfs", "./binderfs" [pid 5869] <... write resumed>) = 18 executing program [pid 5871] <... openat resumed>) = 3 [pid 5870] <... symlink resumed>) = 0 [pid 5869] memfd_create("syzkaller", 0 [pid 5832] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5870] write(1, "executing program\n", 18 [pid 5869] <... memfd_create resumed>) = 3 [pid 5871] write(3, "1000", 4 [pid 5870] <... write resumed>) = 18 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5871] <... write resumed>) = 4 [pid 5870] memfd_create("syzkaller", 0 [pid 5869] <... mmap resumed>) = 0x7fd6d9800000 [pid 5871] close(3 [pid 5870] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./5" [pid 5831] <... close resumed>) = 0 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5871] <... close resumed>) = 0 [pid 5870] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] rmdir("./5" [pid 5871] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... rmdir resumed>) = 0 [pid 5871] <... symlink resumed>) = 0 executing program [pid 5832] mkdir("./6", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5871] write(1, "executing program\n", 18) = 18 [pid 5871] memfd_create("syzkaller", 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] mkdir("./6", 0777 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5871] <... memfd_create resumed>) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5871] <... mmap resumed>) = 0x7fd6d9800000 [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 5869] <... write resumed>) = 524288 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5872 attached , child_tidptr=0x555557df1650) = 5872 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5872] set_robust_list(0x555557df1660, 24) = 0 [pid 5872] chdir("./6") = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5873 [pid 5870] <... write resumed>) = 524288 ./strace-static-x86_64: Process 5873 attached [pid 5870] munmap(0x7fd6d9800000, 138412032 [pid 5873] set_robust_list(0x555557df1660, 24 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5872] setpgid(0, 0) = 0 [pid 5870] <... munmap resumed>) = 0 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5869] munmap(0x7fd6d9800000, 138412032 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5873] chdir("./6" [pid 5872] <... openat resumed>) = 3 [pid 5870] <... openat resumed>) = 4 [pid 5869] <... munmap resumed>) = 0 [pid 5873] <... chdir resumed>) = 0 [pid 5872] write(3, "1000", 4 [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5872] <... write resumed>) = 4 [pid 5872] close(3 [pid 5871] <... write resumed>) = 524288 [pid 5872] <... close resumed>) = 0 [pid 5871] munmap(0x7fd6d9800000, 138412032 [pid 5872] symlink("/dev/binderfs", "./binderfs"executing program [pid 5871] <... munmap resumed>) = 0 [pid 5872] <... symlink resumed>) = 0 [pid 5872] write(1, "executing program\n", 18) = 18 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5873] <... prctl resumed>) = 0 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5870] <... ioctl resumed>) = 0 [pid 5869] <... openat resumed>) = 4 [pid 5873] setpgid(0, 0 [pid 5870] close(3 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5873] <... setpgid resumed>) = 0 [pid 5870] <... close resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5872] <... mmap resumed>) = 0x7fd6d9800000 [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5870] close(4 [pid 5873] <... openat resumed>) = 3 [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5871] <... ioctl resumed>) = 0 [pid 5870] <... close resumed>) = 0 [pid 5869] <... ioctl resumed>) = 0 [pid 5873] write(3, "1000", 4 [pid 5871] close(3 [pid 5870] mkdir("./file1", 0777 [pid 5869] close(3 [pid 5873] <... write resumed>) = 4 [pid 5871] <... close resumed>) = 0 [pid 5873] close(3 [pid 5870] <... mkdir resumed>) = 0 [pid 5869] <... close resumed>) = 0 [pid 5873] <... close resumed>) = 0 [pid 5871] close(4 [pid 5870] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5869] close(4 [pid 5873] symlink("/dev/binderfs", "./binderfs" [pid 5871] <... close resumed>) = 0 [pid 5871] mkdir("./file1", 0777 [pid 5869] <... close resumed>) = 0 [pid 5873] <... symlink resumed>) = 0 executing program [pid 5871] <... mkdir resumed>) = 0 [pid 5873] write(1, "executing program\n", 18 [pid 5869] mkdir("./file1", 0777 [pid 5873] <... write resumed>) = 18 [pid 5871] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5869] <... mkdir resumed>) = 0 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5869] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5872] <... write resumed>) = 524288 [pid 5872] munmap(0x7fd6d9800000, 138412032) = 0 [ 60.831815][ T5870] loop1: detected capacity change from 0 to 1024 [ 60.850812][ T5869] loop4: detected capacity change from 0 to 1024 [ 60.856258][ T5871] loop0: detected capacity change from 0 to 1024 [pid 5872] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5873] <... write resumed>) = 524288 [pid 5872] <... ioctl resumed>) = 0 [pid 5873] munmap(0x7fd6d9800000, 138412032 [pid 5871] <... mount resumed>) = 0 [pid 5869] <... mount resumed>) = 0 [pid 5869] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5870] <... mount resumed>) = 0 [pid 5869] <... openat resumed>) = 3 [pid 5873] <... munmap resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5870] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5869] chdir("./file1" [pid 5873] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5872] close(3 [pid 5871] <... openat resumed>) = 3 [pid 5870] <... openat resumed>) = 3 [pid 5869] <... chdir resumed>) = 0 [pid 5873] <... openat resumed>) = 4 [pid 5872] <... close resumed>) = 0 [pid 5871] chdir("./file1" [pid 5870] chdir("./file1" [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5872] close(4 [pid 5871] <... chdir resumed>) = 0 [pid 5870] <... chdir resumed>) = 0 [pid 5869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5869] chdir("./file0" [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5870] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5869] <... chdir resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5869] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5872] mkdir("./file1", 0777 [pid 5871] chdir("./file0" [pid 5870] chdir("./file0" [pid 5872] <... mkdir resumed>) = 0 [pid 5869] <... openat resumed>) = 4 [pid 5870] <... chdir resumed>) = 0 [pid 5871] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5872] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5871] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5869] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5871] <... openat resumed>) = 4 [pid 5870] <... openat resumed>) = 4 [pid 5871] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5869] <... creat resumed>) = 5 [pid 5870] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5869] sync( [pid 5873] <... ioctl resumed>) = 0 [pid 5873] close(3) = 0 [pid 5873] close(4 [pid 5871] <... creat resumed>) = 5 [pid 5870] <... creat resumed>) = 5 [pid 5873] <... close resumed>) = 0 [pid 5871] sync( [pid 5873] mkdir("./file1", 0777) = 0 [pid 5872] <... mount resumed>) = 0 [pid 5873] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5872] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5870] sync( [pid 5872] <... openat resumed>) = 3 [pid 5872] chdir("./file1") = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5872] chdir("./file0") = 0 [pid 5873] <... mount resumed>) = 0 [pid 5872] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [ 60.902269][ T5872] loop3: detected capacity change from 0 to 1024 [ 60.930191][ T5873] loop2: detected capacity change from 0 to 1024 [pid 5873] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5872] <... openat resumed>) = 4 [pid 5873] chdir("./file1") = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5872] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5873] chdir("./file0" [pid 5872] <... creat resumed>) = 5 [pid 5873] <... chdir resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5872] sync( [pid 5869] <... sync resumed>) = 0 [pid 5873] <... openat resumed>) = 4 [pid 5872] <... sync resumed>) = 0 [pid 5871] <... sync resumed>) = 0 [pid 5870] <... sync resumed>) = 0 [pid 5869] exit_group(0 [pid 5873] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5872] exit_group(0 [pid 5871] exit_group(0 [pid 5870] exit_group(0 [pid 5869] <... exit_group resumed>) = ? [pid 5872] <... exit_group resumed>) = ? [pid 5871] <... exit_group resumed>) = ? [pid 5870] <... exit_group resumed>) = ? [pid 5869] +++ exited with 0 +++ [pid 5872] +++ exited with 0 +++ [pid 5871] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5870] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5873] <... creat resumed>) = 5 [pid 5873] sync() = 0 [pid 5873] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(3, "", [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(3, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(3, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(3, "", [pid 5830] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5833] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5832] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5831] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] unlink("./6/binderfs" [pid 5829] getdents64(3, [pid 5833] unlink("./6/binderfs" [pid 5832] unlink("./6/binderfs" [pid 5831] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5831] unlink("./6/binderfs" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5830] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./6/binderfs") = 0 [pid 5829] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5831] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./6/file1", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/file1", [pid 5832] newfstatat(AT_FDCWD, "./6/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(AT_FDCWD, "./6/file1", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5829] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5829] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5832] newfstatat(4, "", [pid 5831] newfstatat(4, "", [pid 5830] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5829] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5830] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5831] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5832] <... close resumed>) = 0 [pid 5831] rmdir("./6/file1" [pid 5830] close(4 [pid 5833] <... close resumed>) = 0 [pid 5832] rmdir("./6/file1" [pid 5829] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] rmdir("./6/file1" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5833] <... rmdir resumed>) = 0 [pid 5830] rmdir("./6/file1" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./6/file1" [pid 5833] getdents64(3, [pid 5831] getdents64(3, [pid 5832] getdents64(3, [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5832] close(3 [pid 5831] close(3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] rmdir("./6" [pid 5831] rmdir("./6" [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] rmdir("./6" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5832] mkdir("./7", 0777 [pid 5831] mkdir("./7", 0777 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] close(3 [pid 5829] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 5833] mkdir("./7", 0777 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./6" [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] close(3 [pid 5831] close(3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] rmdir("./6" [pid 5829] mkdir("./7", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 5830] mkdir("./7", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3) = 0 ./strace-static-x86_64: Process 5874 attached [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... close resumed>) = 0 [pid 5874] set_robust_list(0x555557df1660, 24./strace-static-x86_64: Process 5875 attached ) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5874 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5876 ./strace-static-x86_64: Process 5878 attached [pid 5877] set_robust_list(0x555557df1660, 24 [pid 5878] set_robust_list(0x555557df1660, 24 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5877 [pid 5877] chdir("./7" [pid 5878] <... set_robust_list resumed>) = 0 [pid 5878] chdir("./7"./strace-static-x86_64: Process 5876 attached [pid 5877] <... chdir resumed>) = 0 [pid 5875] set_robust_list(0x555557df1660, 24 [pid 5874] chdir("./7" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5875 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5878 [pid 5878] <... chdir resumed>) = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] <... chdir resumed>) = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5877] <... prctl resumed>) = 0 [pid 5876] set_robust_list(0x555557df1660, 24 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5878] <... prctl resumed>) = 0 [pid 5877] setpgid(0, 0 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5875] chdir("./7" [pid 5874] <... prctl resumed>) = 0 [pid 5878] setpgid(0, 0 [pid 5876] chdir("./7" [pid 5874] setpgid(0, 0) = 0 [pid 5878] <... setpgid resumed>) = 0 [pid 5877] <... setpgid resumed>) = 0 [pid 5876] <... chdir resumed>) = 0 [pid 5875] <... chdir resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5877] <... openat resumed>) = 3 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] <... openat resumed>) = 3 [pid 5876] <... prctl resumed>) = 0 [pid 5875] <... prctl resumed>) = 0 [pid 5874] write(3, "1000", 4 [pid 5878] <... openat resumed>) = 3 [pid 5877] write(3, "1000", 4 [pid 5876] setpgid(0, 0 [pid 5875] setpgid(0, 0 [pid 5874] <... write resumed>) = 4 [pid 5878] write(3, "1000", 4 [pid 5877] <... write resumed>) = 4 [pid 5876] <... setpgid resumed>) = 0 [pid 5875] <... setpgid resumed>) = 0 [pid 5874] close(3 [pid 5878] <... write resumed>) = 4 [pid 5877] close(3 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5874] <... close resumed>) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5878] close(3 [pid 5877] <... close resumed>) = 0 [pid 5876] <... openat resumed>) = 3 [pid 5875] <... openat resumed>) = 3 [pid 5874] <... symlink resumed>) = 0 [pid 5878] <... close resumed>) = 0 executing program [pid 5877] symlink("/dev/binderfs", "./binderfs" [pid 5874] write(1, "executing program\n", 18 [pid 5878] symlink("/dev/binderfs", "./binderfs" [pid 5877] <... symlink resumed>) = 0 [pid 5876] write(3, "1000", 4 [pid 5875] write(3, "1000", 4 [pid 5874] <... write resumed>) = 18 [pid 5878] <... symlink resumed>) = 0 executing program [pid 5877] write(1, "executing program\n", 18 [pid 5876] <... write resumed>) = 4 [pid 5875] <... write resumed>) = 4 [pid 5874] memfd_create("syzkaller", 0 [pid 5877] <... write resumed>) = 18 [pid 5876] close(3 [pid 5875] close(3 [pid 5877] memfd_create("syzkaller", 0 [pid 5876] <... close resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5874] <... memfd_create resumed>) = 3 executing program executing program executing program [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs" [pid 5877] <... memfd_create resumed>) = 3 [pid 5875] <... symlink resumed>) = 0 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5878] write(1, "executing program\n", 18 [pid 5877] <... mmap resumed>) = 0x7fd6d9800000 [pid 5876] write(1, "executing program\n", 18 [pid 5878] <... write resumed>) = 18 [pid 5876] <... write resumed>) = 18 [pid 5875] write(1, "executing program\n", 18 [pid 5878] memfd_create("syzkaller", 0 [pid 5876] memfd_create("syzkaller", 0 [pid 5878] <... memfd_create resumed>) = 3 [pid 5876] <... memfd_create resumed>) = 3 [pid 5875] <... write resumed>) = 18 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5875] memfd_create("syzkaller", 0 [pid 5876] <... mmap resumed>) = 0x7fd6d9800000 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5875] <... memfd_create resumed>) = 3 [pid 5874] <... mmap resumed>) = 0x7fd6d9800000 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5878] <... mmap resumed>) = 0x7fd6d9800000 [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5875] <... write resumed>) = 524288 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5875] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5874] <... write resumed>) = 524288 [pid 5878] <... write resumed>) = 524288 [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5874] munmap(0x7fd6d9800000, 138412032 [pid 5878] munmap(0x7fd6d9800000, 138412032 [pid 5877] <... write resumed>) = 524288 [pid 5876] <... write resumed>) = 524288 [pid 5874] <... munmap resumed>) = 0 [pid 5877] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5878] <... munmap resumed>) = 0 [pid 5876] munmap(0x7fd6d9800000, 138412032 [pid 5875] <... ioctl resumed>) = 0 [pid 5874] <... openat resumed>) = 4 [pid 5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5877] <... openat resumed>) = 4 [pid 5876] <... munmap resumed>) = 0 [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5878] <... openat resumed>) = 4 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5877] ioctl(4, LOOP_SET_FD, 3 [pid 5876] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5875] close(3 [pid 5876] <... openat resumed>) = 4 [ 61.219746][ T5875] loop2: detected capacity change from 0 to 1024 [ 61.248201][ T5874] loop3: detected capacity change from 0 to 1024 [ 61.257629][ T5878] loop1: detected capacity change from 0 to 1024 [pid 5876] ioctl(4, LOOP_SET_FD, 3 [pid 5878] <... ioctl resumed>) = 0 [pid 5877] <... ioctl resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5874] <... ioctl resumed>) = 0 [pid 5875] close(4 [pid 5878] close(3 [pid 5874] close(3 [pid 5878] <... close resumed>) = 0 [pid 5877] close(3 [pid 5875] <... close resumed>) = 0 [pid 5878] close(4 [pid 5877] <... close resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5878] <... close resumed>) = 0 [pid 5877] close(4 [pid 5878] mkdir("./file1", 0777 [pid 5875] mkdir("./file1", 0777 [pid 5874] close(4 [pid 5877] <... close resumed>) = 0 [pid 5878] <... mkdir resumed>) = 0 [pid 5875] <... mkdir resumed>) = 0 [pid 5877] mkdir("./file1", 0777 [pid 5874] <... close resumed>) = 0 [pid 5875] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "") = 0 [pid 5875] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./file1") = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5875] chdir("./file0") = 0 [pid 5875] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5875] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5876] <... ioctl resumed>) = 0 [pid 5876] close(3) = 0 [pid 5876] close(4) = 0 [pid 5876] mkdir("./file1", 0777 [pid 5874] mkdir("./file1", 0777 [pid 5877] <... mkdir resumed>) = 0 [pid 5874] <... mkdir resumed>) = 0 [pid 5878] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5877] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5874] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5876] <... mkdir resumed>) = 0 [pid 5877] <... mount resumed>) = 0 [pid 5874] <... mount resumed>) = 0 [pid 5877] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5874] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5877] <... openat resumed>) = 3 [pid 5874] <... openat resumed>) = 3 [pid 5877] chdir("./file1" [pid 5876] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5874] chdir("./file1" [pid 5878] <... mount resumed>) = 0 [pid 5877] <... chdir resumed>) = 0 [pid 5875] <... creat resumed>) = 5 [pid 5874] <... chdir resumed>) = 0 [pid 5878] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5878] <... openat resumed>) = 3 [pid 5877] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5878] chdir("./file1" [pid 5877] chdir("./file0" [pid 5875] sync( [pid 5874] chdir("./file0" [pid 5878] <... chdir resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5878] chdir("./file0" [pid 5877] <... chdir resumed>) = 0 [pid 5874] <... chdir resumed>) = 0 [pid 5878] <... chdir resumed>) = 0 [ 61.257892][ T5877] loop0: detected capacity change from 0 to 1024 [ 61.271316][ T5876] loop4: detected capacity change from 0 to 1024 [pid 5874] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5876] <... mount resumed>) = 0 [pid 5878] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5877] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5874] <... openat resumed>) = 4 [pid 5878] <... openat resumed>) = 4 [pid 5876] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5874] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5877] <... openat resumed>) = 4 [pid 5876] <... openat resumed>) = 3 [pid 5876] chdir("./file1") = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5876] chdir("./file0" [pid 5878] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5877] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5875] <... sync resumed>) = 0 [pid 5874] <... creat resumed>) = 5 [pid 5875] exit_group(0 [pid 5874] sync( [pid 5875] <... exit_group resumed>) = ? [pid 5876] <... chdir resumed>) = 0 [pid 5875] +++ exited with 0 +++ [pid 5876] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5878] <... creat resumed>) = 5 [pid 5876] <... openat resumed>) = 4 [pid 5876] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5877] <... creat resumed>) = 5 [pid 5877] sync( [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5878] sync( [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5876] <... creat resumed>) = 5 [pid 5831] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5876] sync( [pid 5831] unlink("./7/binderfs") = 0 [pid 5831] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5831] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./7/file1", [pid 5877] <... sync resumed>) = 0 [pid 5874] <... sync resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5876] <... sync resumed>) = 0 [pid 5878] <... sync resumed>) = 0 [pid 5831] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5877] exit_group(0 [pid 5874] exit_group(0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5876] exit_group(0 [pid 5877] <... exit_group resumed>) = ? [pid 5878] exit_group(0 [pid 5876] <... exit_group resumed>) = ? [pid 5874] <... exit_group resumed>) = ? [pid 5831] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... exit_group resumed>) = ? [pid 5877] +++ exited with 0 +++ [pid 5876] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5874] +++ exited with 0 +++ [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... restart_syscall resumed>) = 0 [pid 5878] +++ exited with 0 +++ [pid 5831] newfstatat(4, "", [pid 5829] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 3 [pid 5832] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(3, "", [pid 5833] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(4, [pid 5830] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, [pid 5833] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5831] close(4 [pid 5830] newfstatat(3, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./7/file1" [pid 5830] getdents64(3, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5833] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./7/binderfs" [pid 5833] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5830] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5829] <... unlink resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5832] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5831] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] rmdir("./7" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./7/binderfs" [pid 5832] unlink("./7/binderfs" [pid 5831] <... rmdir resumed>) = 0 [pid 5830] unlink("./7/binderfs" [pid 5833] <... unlink resumed>) = 0 [pid 5831] mkdir("./8", 0777 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5830] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./7/file1", [pid 5833] <... umount2 resumed>) = 0 [pid 5830] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] close(4 [pid 5829] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./7/file1") = 0 [pid 5830] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./7/file1", [pid 5832] newfstatat(AT_FDCWD, "./7/file1", [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5879 attached [pid 5833] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5879] set_robust_list(0x555557df1660, 24 [pid 5833] newfstatat(4, "", [pid 5832] newfstatat(4, "", [pid 5829] newfstatat(4, "", [pid 5879] <... set_robust_list resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5879] chdir("./8" [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5879 [pid 5830] close(3 [pid 5829] getdents64(4, [pid 5879] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./7" [pid 5833] close(4 [pid 5832] close(4 [pid 5829] getdents64(4, [pid 5832] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] rmdir("./7/file1" [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(4 [pid 5879] <... prctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] mkdir("./8", 0777 [pid 5829] <... close resumed>) = 0 [pid 5879] setpgid(0, 0 [pid 5833] rmdir("./7/file1" [pid 5879] <... setpgid resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] <... mkdir resumed>) = 0 [pid 5829] rmdir("./7/file1" [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... rmdir resumed>) = 0 [pid 5879] <... openat resumed>) = 3 [pid 5833] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5879] write(3, "1000", 4 [pid 5833] close(3 [pid 5832] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] getdents64(3, [pid 5879] <... write resumed>) = 4 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5879] close(3 [pid 5833] rmdir("./7" [pid 5832] rmdir("./7" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] close(3 [pid 5879] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs" [pid 5833] mkdir("./8", 0777 [pid 5832] mkdir("./8", 0777 [pid 5830] <... ioctl resumed>) = 0 [pid 5879] <... symlink resumed>) = 0 [pid 5829] rmdir("./7" [pid 5832] <... mkdir resumed>) = 0 [pid 5830] close(3 [pid 5879] write(1, "executing program\n", 18 [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 5879] <... write resumed>) = 18 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5879] memfd_create("syzkaller", 0 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] mkdir("./8", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5832] close(3 [pid 5879] <... memfd_create resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] close(3) = 0 ./strace-static-x86_64: Process 5880 attached [pid 5879] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5880 [pid 5880] set_robust_list(0x555557df1660, 24 [pid 5829] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached [pid 5880] <... set_robust_list resumed>) = 0 [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5881 [pid 5881] set_robust_list(0x555557df1660, 24 [pid 5880] chdir("./8" [pid 5881] <... set_robust_list resumed>) = 0 [pid 5881] chdir("./8") = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5883 ./strace-static-x86_64: Process 5883 attached ./strace-static-x86_64: Process 5882 attached [pid 5881] <... openat resumed>) = 3 [pid 5880] <... chdir resumed>) = 0 [pid 5879] <... write resumed>) = 524288 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5882 [pid 5883] set_robust_list(0x555557df1660, 24 [pid 5882] set_robust_list(0x555557df1660, 24 [pid 5881] write(3, "1000", 4 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5879] munmap(0x7fd6d9800000, 138412032 [pid 5881] <... write resumed>) = 4 [pid 5879] <... munmap resumed>) = 0 [pid 5881] close(3 [pid 5879] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5881] <... close resumed>) = 0 [pid 5879] <... openat resumed>) = 4 [pid 5881] symlink("/dev/binderfs", "./binderfs" [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 5883] <... set_robust_list resumed>) = 0 executing program [pid 5882] <... set_robust_list resumed>) = 0 [pid 5881] <... symlink resumed>) = 0 [pid 5880] <... prctl resumed>) = 0 [pid 5881] write(1, "executing program\n", 18 [pid 5882] chdir("./8" [pid 5880] setpgid(0, 0 [pid 5883] chdir("./8" [pid 5882] <... chdir resumed>) = 0 [pid 5881] <... write resumed>) = 18 [pid 5880] <... setpgid resumed>) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] memfd_create("syzkaller", 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5882] <... prctl resumed>) = 0 [pid 5881] <... memfd_create resumed>) = 3 [pid 5880] <... openat resumed>) = 3 [pid 5879] <... ioctl resumed>) = 0 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5883] <... prctl resumed>) = 0 [pid 5882] setpgid(0, 0 [pid 5881] <... mmap resumed>) = 0x7fd6d9800000 [pid 5880] write(3, "1000", 4 [pid 5879] close(3 [pid 5883] setpgid(0, 0 [pid 5882] <... setpgid resumed>) = 0 [pid 5880] <... write resumed>) = 4 [pid 5883] <... setpgid resumed>) = 0 [pid 5879] <... close resumed>) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5880] close(3 [pid 5879] close(4 [pid 5883] <... openat resumed>) = 3 [pid 5880] <... close resumed>) = 0 [pid 5879] <... close resumed>) = 0 [pid 5882] <... openat resumed>) = 3 [pid 5880] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 5883] write(3, "1000", 4 [pid 5882] write(3, "1000", 4 [pid 5880] <... symlink resumed>) = 0 [pid 5879] mkdir("./file1", 0777 [pid 5883] <... write resumed>) = 4 [pid 5882] <... write resumed>) = 4 [pid 5880] write(1, "executing program\n", 18 [pid 5883] close(3 [pid 5882] close(3 [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5880] <... write resumed>) = 18 [pid 5879] <... mkdir resumed>) = 0 [pid 5883] <... close resumed>) = 0 [pid 5882] <... close resumed>) = 0 [pid 5880] memfd_create("syzkaller", 0 [pid 5882] symlink("/dev/binderfs", "./binderfs" [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5882] <... symlink resumed>) = 0 [pid 5880] <... memfd_create resumed>) = 3 [pid 5883] write(1, "executing program\n", 18 [pid 5882] write(1, "executing program\n", 18 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5883] <... write resumed>) = 18 [pid 5879] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, ""executing program [pid 5883] memfd_create("syzkaller", 0) = 3 [pid 5882] <... write resumed>) = 18 [pid 5880] <... mmap resumed>) = 0x7fd6d9800000 [pid 5882] memfd_create("syzkaller", 0 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] <... memfd_create resumed>) = 3 [ 61.539649][ T5879] loop2: detected capacity change from 0 to 1024 [pid 5883] <... mmap resumed>) = 0x7fd6d9800000 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5881] <... write resumed>) = 524288 [pid 5881] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5882] <... mmap resumed>) = 0x7fd6d9800000 [pid 5883] <... write resumed>) = 524288 [pid 5880] <... write resumed>) = 524288 [pid 5881] <... ioctl resumed>) = 0 [pid 5883] munmap(0x7fd6d9800000, 138412032 [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5880] munmap(0x7fd6d9800000, 138412032 [pid 5879] <... mount resumed>) = 0 [pid 5879] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file1") = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5881] close(3) = 0 [pid 5883] <... munmap resumed>) = 0 [pid 5882] <... write resumed>) = 524288 [pid 5881] close(4 [pid 5880] <... munmap resumed>) = 0 [pid 5879] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5881] <... close resumed>) = 0 [pid 5881] mkdir("./file1", 0777 [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5881] <... mkdir resumed>) = 0 [pid 5879] chdir("./file0" [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5883] <... openat resumed>) = 4 [pid 5882] munmap(0x7fd6d9800000, 138412032 [pid 5881] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5880] ioctl(4, LOOP_SET_FD, 3 [pid 5879] <... chdir resumed>) = 0 [ 61.591636][ T5881] loop0: detected capacity change from 0 to 1024 [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5879] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5882] <... munmap resumed>) = 0 [pid 5881] <... mount resumed>) = 0 [pid 5880] <... ioctl resumed>) = 0 [pid 5879] <... openat resumed>) = 4 [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5881] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5880] close(3 [pid 5882] <... openat resumed>) = 4 [pid 5881] <... openat resumed>) = 3 [pid 5880] <... close resumed>) = 0 [pid 5883] <... ioctl resumed>) = 0 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5881] chdir("./file1" [pid 5880] close(4 [pid 5879] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5883] close(3) = 0 [pid 5883] close(4) = 0 [pid 5883] mkdir("./file1", 0777) = 0 [pid 5883] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5882] <... ioctl resumed>) = 0 [pid 5881] <... chdir resumed>) = 0 [pid 5880] <... close resumed>) = 0 [pid 5879] <... creat resumed>) = 5 [pid 5882] close(3 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5880] mkdir("./file1", 0777 [pid 5879] sync( [pid 5882] <... close resumed>) = 0 [pid 5881] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5880] <... mkdir resumed>) = 0 [pid 5882] close(4 [pid 5881] chdir("./file0" [pid 5882] <... close resumed>) = 0 [pid 5880] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5882] mkdir("./file1", 0777 [pid 5881] <... chdir resumed>) = 0 [pid 5881] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5881] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5883] <... mount resumed>) = 0 [pid 5882] <... mkdir resumed>) = 0 [pid 5883] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5882] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5883] <... openat resumed>) = 3 [pid 5883] chdir("./file1" [pid 5881] <... creat resumed>) = 5 [pid 5883] <... chdir resumed>) = 0 [pid 5881] sync( [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 61.642545][ T5880] loop1: detected capacity change from 0 to 1024 [ 61.643961][ T5883] loop3: detected capacity change from 0 to 1024 [ 61.656906][ T5882] loop4: detected capacity change from 0 to 1024 [pid 5883] chdir("./file0" [pid 5880] <... mount resumed>) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5882] <... mount resumed>) = 0 [pid 5882] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5880] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5883] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5882] <... openat resumed>) = 3 [pid 5880] <... openat resumed>) = 3 [pid 5880] chdir("./file1") = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5880] chdir("./file0" [pid 5882] chdir("./file1") = 0 [pid 5883] <... openat resumed>) = 4 [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5883] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5880] <... chdir resumed>) = 0 [pid 5883] <... creat resumed>) = 5 [pid 5882] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5883] sync( [pid 5882] chdir("./file0" [pid 5881] <... sync resumed>) = 0 [pid 5880] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5879] <... sync resumed>) = 0 [pid 5882] <... chdir resumed>) = 0 [pid 5881] exit_group(0 [pid 5880] <... openat resumed>) = 4 [pid 5879] exit_group(0) = ? [pid 5880] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5883] <... sync resumed>) = 0 [pid 5882] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5881] <... exit_group resumed>) = ? [pid 5879] +++ exited with 0 +++ [pid 5883] exit_group(0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5883] <... exit_group resumed>) = ? [pid 5883] +++ exited with 0 +++ [pid 5882] <... openat resumed>) = 4 [pid 5881] +++ exited with 0 +++ [pid 5831] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5882] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5880] <... creat resumed>) = 5 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5880] sync( [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5882] <... creat resumed>) = 5 [pid 5880] <... sync resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5882] sync( [pid 5880] exit_group(0 [pid 5831] getdents64(3, [pid 5880] <... exit_group resumed>) = ? [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... sync resumed>) = 0 [pid 5880] +++ exited with 0 +++ [pid 5832] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] exit_group(0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] <... openat resumed>) = 3 [pid 5882] <... exit_group resumed>) = ? [pid 5832] newfstatat(3, "", [pid 5831] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5829] newfstatat(3, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5882] +++ exited with 0 +++ [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] unlink("./8/binderfs" [pid 5830] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5830] <... openat resumed>) = 3 [pid 5829] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 5832] unlink("./8/binderfs" [pid 5829] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(3, [pid 5829] unlink("./8/binderfs" [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... unlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = 0 [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./8/file1", [pid 5830] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./8/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./8/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./8/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5833] newfstatat(3, "", [pid 5832] <... openat resumed>) = 4 [pid 5830] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] newfstatat(4, "", [pid 5831] newfstatat(4, "", [pid 5829] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... openat resumed>) = 4 [pid 5833] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5831] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5831] close(4 [pid 5830] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5830] newfstatat(AT_FDCWD, "./8/file1", [pid 5833] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5832] rmdir("./8/file1" [pid 5831] rmdir("./8/file1" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5833] unlink("./8/binderfs") = 0 [pid 5832] getdents64(3, [pid 5831] getdents64(3, [pid 5830] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(4 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5831] close(3 [pid 5829] rmdir("./8/file1" [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] rmdir("./8" [pid 5830] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./8" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] mkdir("./9", 0777 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./9", 0777 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... mkdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./8/file1", [pid 5829] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... mkdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] rmdir("./8" [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] close(4 [pid 5831] <... openat resumed>) = 3 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] close(3 [pid 5830] rmdir("./8/file1" [pid 5829] mkdir("./9", 0777 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] close(3 [pid 5833] getdents64(4, [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(3, [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./8/file1" [pid 5830] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./8") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5830] mkdir("./9", 0777 [pid 5833] <... close resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5833] rmdir("./8") = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5884 attached [pid 5833] mkdir("./9", 0777 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached [pid 5884] set_robust_list(0x555557df1660, 24 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5884 [pid 5829] <... ioctl resumed>) = 0 [pid 5885] set_robust_list(0x555557df1660, 24 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5885 [pid 5829] close(3 [pid 5885] <... set_robust_list resumed>) = 0 [pid 5884] chdir("./9" [pid 5885] chdir("./9" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5886 [pid 5885] <... chdir resumed>) = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0 [pid 5829] <... close resumed>) = 0 [pid 5885] <... setpgid resumed>) = 0 [pid 5833] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5886 attached [pid 5884] <... chdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5886] set_robust_list(0x555557df1660, 24 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... ioctl resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5885] <... openat resumed>) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] close(3./strace-static-x86_64: Process 5887 attached [pid 5886] <... set_robust_list resumed>) = 0 [pid 5885] write(1, "executing program\n", 18 [pid 5884] <... prctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5887 [pid 5887] set_robust_list(0x555557df1660, 24executing program [pid 5886] chdir("./9" [pid 5884] setpgid(0, 0 [pid 5887] <... set_robust_list resumed>) = 0 [pid 5885] <... write resumed>) = 18 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5886] <... chdir resumed>) = 0 [pid 5884] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5888 attached [pid 5887] chdir("./9" [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5885] memfd_create("syzkaller", 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5887] <... chdir resumed>) = 0 [pid 5886] <... prctl resumed>) = 0 [pid 5885] <... memfd_create resumed>) = 3 [pid 5888] set_robust_list(0x555557df1660, 24 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5886] setpgid(0, 0 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5884] <... openat resumed>) = 3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5888 [pid 5888] <... set_robust_list resumed>) = 0 [pid 5887] <... prctl resumed>) = 0 [pid 5886] <... setpgid resumed>) = 0 [pid 5888] chdir("./9" [pid 5887] setpgid(0, 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5885] <... mmap resumed>) = 0x7fd6d9800000 [pid 5884] write(3, "1000", 4 [pid 5888] <... chdir resumed>) = 0 [pid 5887] <... setpgid resumed>) = 0 [pid 5886] <... openat resumed>) = 3 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5888] <... symlink resumed>) = 0 [pid 5886] write(3, "1000", 4 [pid 5884] <... write resumed>) = 4 [pid 5887] <... openat resumed>) = 3 [pid 5884] close(3 [pid 5887] write(3, "1000", 4 [pid 5886] <... write resumed>) = 4 [pid 5884] <... close resumed>) = 0 [pid 5887] <... write resumed>) = 4 [pid 5886] close(3 [pid 5887] close(3 [pid 5886] <... close resumed>) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs" [pid 5887] <... close resumed>) = 0 executing program executing program executing program executing program [pid 5888] write(1, "executing program\n", 18 [pid 5887] symlink("/dev/binderfs", "./binderfs" [pid 5886] <... symlink resumed>) = 0 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 5888] <... write resumed>) = 18 [pid 5887] <... symlink resumed>) = 0 [pid 5886] write(1, "executing program\n", 18 [pid 5884] <... symlink resumed>) = 0 [pid 5887] write(1, "executing program\n", 18 [pid 5886] <... write resumed>) = 18 [pid 5888] memfd_create("syzkaller", 0 [pid 5884] write(1, "executing program\n", 18 [pid 5888] <... memfd_create resumed>) = 3 [pid 5887] <... write resumed>) = 18 [pid 5886] memfd_create("syzkaller", 0 [pid 5884] <... write resumed>) = 18 [pid 5887] memfd_create("syzkaller", 0 [pid 5886] <... memfd_create resumed>) = 3 [pid 5884] memfd_create("syzkaller", 0 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5887] <... memfd_create resumed>) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5884] <... memfd_create resumed>) = 3 [pid 5888] <... mmap resumed>) = 0x7fd6d9800000 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5886] <... mmap resumed>) = 0x7fd6d9800000 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5887] <... mmap resumed>) = 0x7fd6d9800000 [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5884] <... mmap resumed>) = 0x7fd6d9800000 [pid 5888] <... write resumed>) = 524288 [pid 5885] <... write resumed>) = 524288 [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5888] munmap(0x7fd6d9800000, 138412032 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5886] <... write resumed>) = 524288 [pid 5885] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5888] <... munmap resumed>) = 0 [pid 5887] <... write resumed>) = 524288 [pid 5885] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5884] <... write resumed>) = 524288 [pid 5886] munmap(0x7fd6d9800000, 138412032 [pid 5888] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5886] <... munmap resumed>) = 0 [pid 5885] <... openat resumed>) = 4 [pid 5888] <... openat resumed>) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 [pid 5885] ioctl(4, LOOP_SET_FD, 3 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3 [pid 5887] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5884] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5884] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5887] <... openat resumed>) = 4 [pid 5884] <... openat resumed>) = 4 [pid 5887] ioctl(4, LOOP_SET_FD, 3 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5888] <... ioctl resumed>) = 0 [pid 5887] <... ioctl resumed>) = 0 [pid 5887] close(3 [pid 5888] close(3) = 0 [pid 5887] <... close resumed>) = 0 [pid 5887] close(4 [pid 5888] close(4 [pid 5887] <... close resumed>) = 0 [pid 5887] mkdir("./file1", 0777 [pid 5888] <... close resumed>) = 0 [pid 5887] <... mkdir resumed>) = 0 [pid 5887] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5886] <... ioctl resumed>) = 0 [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] mkdir("./file1", 0777) = 0 [pid 5886] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5884] <... ioctl resumed>) = 0 [pid 5886] <... mount resumed>) = 0 [pid 5885] <... ioctl resumed>) = 0 [pid 5884] close(3) = 0 [pid 5885] close(3 [pid 5884] close(4 [pid 5886] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5885] <... close resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5886] <... openat resumed>) = 3 [pid 5885] close(4 [pid 5886] chdir("./file1" [pid 5885] <... close resumed>) = 0 [pid 5884] mkdir("./file1", 0777 [pid 5888] mkdir("./file1", 0777) = 0 [pid 5884] <... mkdir resumed>) = 0 [pid 5888] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5887] <... mount resumed>) = 0 [pid 5886] <... chdir resumed>) = 0 [ 61.977542][ T5888] loop4: detected capacity change from 0 to 1024 [ 61.978389][ T5886] loop1: detected capacity change from 0 to 1024 [ 61.984340][ T5885] loop2: detected capacity change from 0 to 1024 [ 61.996864][ T5887] loop0: detected capacity change from 0 to 1024 [ 61.997073][ T5884] loop3: detected capacity change from 0 to 1024 [pid 5885] mkdir("./file1", 0777) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5886] chdir("./file0" [pid 5887] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5884] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5887] <... openat resumed>) = 3 [pid 5885] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5887] chdir("./file1" [pid 5888] <... mount resumed>) = 0 [pid 5887] <... chdir resumed>) = 0 [pid 5886] <... chdir resumed>) = 0 [pid 5885] <... mount resumed>) = 0 [pid 5888] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5888] <... openat resumed>) = 3 [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5886] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5888] chdir("./file1" [pid 5886] <... openat resumed>) = 4 [pid 5885] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5888] <... chdir resumed>) = 0 [pid 5887] chdir("./file0" [pid 5888] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5887] <... chdir resumed>) = 0 [pid 5885] <... openat resumed>) = 3 [pid 5888] chdir("./file0" [pid 5887] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5885] chdir("./file1" [pid 5887] <... openat resumed>) = 4 [pid 5885] <... chdir resumed>) = 0 [pid 5884] <... mount resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5884] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5884] <... openat resumed>) = 3 [pid 5888] <... chdir resumed>) = 0 [pid 5885] chdir("./file0" [pid 5884] chdir("./file1" [pid 5887] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5886] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5888] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5884] <... chdir resumed>) = 0 [pid 5886] <... creat resumed>) = 5 [pid 5884] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5888] <... openat resumed>) = 4 [pid 5884] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5885] <... chdir resumed>) = 0 [pid 5884] chdir("./file0" [pid 5885] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5887] <... creat resumed>) = 5 [pid 5888] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5887] sync( [pid 5886] sync( [pid 5885] <... openat resumed>) = 4 [pid 5884] <... chdir resumed>) = 0 [pid 5884] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5885] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5888] <... creat resumed>) = 5 [pid 5884] <... openat resumed>) = 4 [pid 5884] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5888] sync( [pid 5885] <... creat resumed>) = 5 [pid 5884] <... creat resumed>) = 5 [pid 5885] sync( [pid 5884] sync( [pid 5886] <... sync resumed>) = 0 [pid 5887] <... sync resumed>) = 0 [pid 5886] exit_group(0 [pid 5887] exit_group(0 [pid 5888] <... sync resumed>) = 0 [pid 5886] <... exit_group resumed>) = ? [pid 5885] <... sync resumed>) = 0 [pid 5884] <... sync resumed>) = 0 [pid 5887] <... exit_group resumed>) = ? [pid 5884] exit_group(0) = ? [pid 5886] +++ exited with 0 +++ [pid 5887] +++ exited with 0 +++ [pid 5888] exit_group(0 [pid 5885] exit_group(0 [pid 5884] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5888] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- [pid 5885] <... exit_group resumed>) = ? [pid 5888] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(3, "", [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(3, "", [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5830] getdents64(3, [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(3, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] getdents64(3, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] getdents64(3, [pid 5832] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5830] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./9/binderfs" [pid 5830] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5829] unlink("./9/binderfs" [pid 5832] unlink("./9/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] unlink("./9/binderfs" [pid 5829] <... unlink resumed>) = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5830] unlink("./9/binderfs" [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./9/file1", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./9/file1", [pid 5829] newfstatat(AT_FDCWD, "./9/file1", [pid 5833] newfstatat(AT_FDCWD, "./9/file1", [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(4, "", [pid 5831] <... openat resumed>) = 4 [pid 5830] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(4, "", [pid 5832] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5830] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(4, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5831] getdents64(4, [pid 5830] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5833] getdents64(4, [pid 5832] close(4 [pid 5831] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] close(4 [pid 5832] rmdir("./9/file1" [pid 5831] close(4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 5830] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./9/file1" [pid 5829] close(4 [pid 5833] rmdir("./9/file1" [pid 5832] getdents64(3, [pid 5830] close(4 [pid 5829] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./9/file1" [pid 5833] getdents64(3, [pid 5832] close(3 [pid 5831] getdents64(3, [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./9/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 5833] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5829] getdents64(3, [pid 5833] rmdir("./9" [pid 5831] <... close resumed>) = 0 [pid 5832] rmdir("./9" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./9" [pid 5830] getdents64(3, [pid 5829] close(3) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] rmdir("./9" [pid 5833] mkdir("./10", 0777 [pid 5832] mkdir("./10", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] close(3) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] rmdir("./9" [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] mkdir("./10", 0777 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] mkdir("./10", 0777 [pid 5830] mkdir("./10", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5832] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] close(3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] close(3 [pid 5833] <... close resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached ./strace-static-x86_64: Process 5890 attached ./strace-static-x86_64: Process 5889 attached [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5889 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5890 [pid 5891] set_robust_list(0x555557df1660, 24 [pid 5890] set_robust_list(0x555557df1660, 24 [pid 5889] set_robust_list(0x555557df1660, 24) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5892 [pid 5889] chdir("./10" [pid 5891] <... set_robust_list resumed>) = 0 [pid 5891] chdir("./10" [pid 5889] <... chdir resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5889] <... prctl resumed>) = 0 [pid 5891] <... prctl resumed>) = 0 [pid 5889] setpgid(0, 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached [pid 5891] setpgid(0, 0 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5889] <... setpgid resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5891 [pid 5891] <... setpgid resumed>) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5890] chdir("./10" [pid 5892] set_robust_list(0x555557df1660, 24 [pid 5889] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5893 attached [pid 5892] <... set_robust_list resumed>) = 0 [pid 5891] <... openat resumed>) = 3 [pid 5890] <... chdir resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5893 [pid 5889] write(3, "1000", 4 [pid 5891] write(3, "1000", 4 [pid 5889] <... write resumed>) = 4 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] chdir("./10" [pid 5891] <... write resumed>) = 4 [pid 5889] close(3 [pid 5890] <... prctl resumed>) = 0 [pid 5891] close(3 [pid 5890] setpgid(0, 0 [pid 5889] <... close resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5890] <... setpgid resumed>) = 0 [pid 5889] <... symlink resumed>) = 0 [pid 5893] set_robust_list(0x555557df1660, 24) = 0 [pid 5892] <... chdir resumed>) = 0 [pid 5891] <... symlink resumed>) = 0 executing program [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] write(1, "executing program\n", 18 [pid 5893] chdir("./10" [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5891] write(1, "executing program\n", 18 [pid 5892] <... prctl resumed>) = 0 [pid 5890] <... openat resumed>) = 3 [pid 5893] <... chdir resumed>) = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] setpgid(0, 0 [pid 5890] write(3, "1000", 4 [pid 5889] <... write resumed>) = 18 executing program [pid 5893] <... prctl resumed>) = 0 [pid 5892] <... setpgid resumed>) = 0 [pid 5891] <... write resumed>) = 18 [pid 5890] <... write resumed>) = 4 [pid 5889] memfd_create("syzkaller", 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] memfd_create("syzkaller", 0 [pid 5890] close(3 [pid 5889] <... memfd_create resumed>) = 3 [pid 5893] setpgid(0, 0) = 0 [pid 5891] <... memfd_create resumed>) = 3 [pid 5890] <... close resumed>) = 0 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] <... openat resumed>) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5889] <... mmap resumed>) = 0x7fd6d9800000 [pid 5893] <... openat resumed>) = 3 [pid 5892] write(3, "1000", 4 [pid 5891] <... mmap resumed>) = 0x7fd6d9800000 [pid 5890] <... symlink resumed>) = 0 [pid 5893] write(3, "1000", 4 [pid 5892] <... write resumed>) = 4 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288executing program [pid 5893] <... write resumed>) = 4 [pid 5892] close(3 [pid 5890] write(1, "executing program\n", 18 [pid 5893] close(3 [pid 5892] <... close resumed>) = 0 [pid 5890] <... write resumed>) = 18 [pid 5893] <... close resumed>) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5890] memfd_create("syzkaller", 0 [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 executing program [pid 5893] symlink("/dev/binderfs", "./binderfs" [pid 5892] <... symlink resumed>) = 0 [pid 5890] <... memfd_create resumed>) = 3 [pid 5893] <... symlink resumed>) = 0 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] write(1, "executing program\n", 18executing program [pid 5893] write(1, "executing program\n", 18 [pid 5892] <... write resumed>) = 18 [pid 5890] <... mmap resumed>) = 0x7fd6d9800000 [pid 5893] <... write resumed>) = 18 [pid 5892] memfd_create("syzkaller", 0 [pid 5893] memfd_create("syzkaller", 0 [pid 5892] <... memfd_create resumed>) = 3 [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5893] <... mmap resumed>) = 0x7fd6d9800000 [pid 5892] <... mmap resumed>) = 0x7fd6d9800000 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5891] <... write resumed>) = 524288 [pid 5889] <... write resumed>) = 524288 [pid 5891] munmap(0x7fd6d9800000, 138412032 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5890] <... write resumed>) = 524288 [pid 5889] munmap(0x7fd6d9800000, 138412032 [pid 5893] <... write resumed>) = 524288 [pid 5892] <... write resumed>) = 524288 [pid 5891] <... munmap resumed>) = 0 [pid 5890] munmap(0x7fd6d9800000, 138412032 [pid 5889] <... munmap resumed>) = 0 [pid 5892] munmap(0x7fd6d9800000, 138412032 [pid 5891] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5889] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5891] <... openat resumed>) = 4 [pid 5889] <... openat resumed>) = 4 [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5890] <... munmap resumed>) = 0 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 5893] munmap(0x7fd6d9800000, 138412032 [pid 5892] <... munmap resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5893] <... munmap resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5891] close(3 [pid 5890] <... openat resumed>) = 4 [pid 5892] <... openat resumed>) = 4 [pid 5893] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5892] ioctl(4, LOOP_SET_FD, 3 [pid 5891] <... close resumed>) = 0 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5889] <... ioctl resumed>) = 0 [pid 5893] <... openat resumed>) = 4 [pid 5892] <... ioctl resumed>) = 0 [pid 5891] close(4 [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5892] close(3 [pid 5891] <... close resumed>) = 0 [pid 5890] <... ioctl resumed>) = 0 [pid 5889] close(3 [pid 5893] <... ioctl resumed>) = 0 [pid 5890] close(3 [pid 5889] <... close resumed>) = 0 [pid 5893] close(3 [pid 5890] <... close resumed>) = 0 [pid 5889] close(4 [pid 5893] <... close resumed>) = 0 [pid 5890] close(4 [pid 5889] <... close resumed>) = 0 [pid 5893] close(4 [pid 5890] <... close resumed>) = 0 [pid 5889] mkdir("./file1", 0777 [pid 5893] <... close resumed>) = 0 [pid 5892] <... close resumed>) = 0 [pid 5891] mkdir("./file1", 0777 [pid 5890] mkdir("./file1", 0777 [pid 5889] <... mkdir resumed>) = 0 [pid 5893] mkdir("./file1", 0777 [pid 5892] close(4 [pid 5891] <... mkdir resumed>) = 0 [pid 5890] <... mkdir resumed>) = 0 [pid 5889] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5893] <... mkdir resumed>) = 0 [pid 5892] <... close resumed>) = 0 [pid 5893] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "") = 0 [pid 5892] mkdir("./file1", 0777 [pid 5891] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5890] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5889] <... mount resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5892] <... mkdir resumed>) = 0 [pid 5889] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5893] <... openat resumed>) = 3 [pid 5892] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5889] <... openat resumed>) = 3 [pid 5893] chdir("./file1" [pid 5889] chdir("./file1" [pid 5893] <... chdir resumed>) = 0 [pid 5889] <... chdir resumed>) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5889] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5893] chdir("./file0" [pid 5889] chdir("./file0" [pid 5893] <... chdir resumed>) = 0 [pid 5890] <... mount resumed>) = 0 [pid 5889] <... chdir resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5889] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5893] <... openat resumed>) = 4 [pid 5890] <... openat resumed>) = 3 [pid 5889] <... openat resumed>) = 4 [pid 5889] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5890] chdir("./file1" [pid 5893] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5890] <... chdir resumed>) = 0 [pid 5891] <... mount resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5889] <... creat resumed>) = 5 [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5890] chdir("./file0" [ 62.379667][ T5891] loop0: detected capacity change from 0 to 1024 [ 62.380466][ T5889] loop4: detected capacity change from 0 to 1024 [ 62.394074][ T5892] loop3: detected capacity change from 0 to 1024 [ 62.394399][ T5890] loop1: detected capacity change from 0 to 1024 [ 62.408409][ T5893] loop2: detected capacity change from 0 to 1024 [pid 5889] sync( [pid 5893] <... creat resumed>) = 5 [pid 5892] <... mount resumed>) = 0 [pid 5891] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5890] <... chdir resumed>) = 0 [pid 5892] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5891] <... openat resumed>) = 3 [pid 5892] <... openat resumed>) = 3 [pid 5892] chdir("./file1" [pid 5891] chdir("./file1" [pid 5892] <... chdir resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5893] sync( [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5891] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5890] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5892] chdir("./file0" [pid 5890] <... openat resumed>) = 4 [pid 5892] <... chdir resumed>) = 0 [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5889] <... sync resumed>) = 0 [pid 5892] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5893] <... sync resumed>) = 0 [pid 5892] <... openat resumed>) = 4 [pid 5891] chdir("./file0" [pid 5893] exit_group(0 [pid 5890] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5889] exit_group(0 [pid 5893] <... exit_group resumed>) = ? [pid 5892] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5889] <... exit_group resumed>) = ? [pid 5893] +++ exited with 0 +++ [pid 5889] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5890] <... creat resumed>) = 5 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5890] sync( [pid 5891] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5892] <... creat resumed>) = 5 [pid 5891] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5892] sync( [pid 5891] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(3, "", [pid 5833] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5891] <... creat resumed>) = 5 [pid 5833] newfstatat(3, "", [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./10/binderfs") = 0 [pid 5831] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5891] sync( [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5892] <... sync resumed>) = 0 [pid 5891] <... sync resumed>) = 0 [pid 5890] <... sync resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5892] exit_group(0 [pid 5891] exit_group(0 [pid 5890] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5892] <... exit_group resumed>) = ? [pid 5891] <... exit_group resumed>) = ? [pid 5890] <... exit_group resumed>) = ? [pid 5833] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5892] +++ exited with 0 +++ [pid 5891] +++ exited with 0 +++ [pid 5890] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./10/file1", [pid 5833] unlink("./10/binderfs" [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] <... unlink resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(4, "", [pid 5833] newfstatat(AT_FDCWD, "./10/file1", [pid 5832] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5830] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5831] getdents64(4, [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5833] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(4, "", [pid 5832] getdents64(3, [pid 5831] close(4 [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] getdents64(4, [pid 5832] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./10/file1" [pid 5830] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5832] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5831] <... rmdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] close(4 [pid 5832] unlink("./10/binderfs" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] unlink("./10/binderfs" [pid 5829] unlink("./10/binderfs" [pid 5833] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] close(3 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] rmdir("./10/file1" [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... rmdir resumed>) = 0 [pid 5831] rmdir("./10" [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./11", 0777 [pid 5830] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./10/file1", [pid 5830] newfstatat(AT_FDCWD, "./10/file1", [pid 5829] newfstatat(AT_FDCWD, "./10/file1", [pid 5831] <... mkdir resumed>) = 0 [pid 5833] rmdir("./10" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] mkdir("./11", 0777 [pid 5832] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 5831] close(3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] newfstatat(4, "", [pid 5830] newfstatat(4, "", [pid 5829] newfstatat(4, "", [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] close(3 [pid 5832] getdents64(4, [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5829] close(4) = 0 [pid 5829] rmdir("./10/file1"./strace-static-x86_64: Process 5894 attached [pid 5832] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] rmdir("./10/file1" [pid 5830] close(4 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./10/file1" [pid 5829] close(3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./10" [pid 5832] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5832] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5833] <... close resumed>) = 0 [pid 5832] rmdir("./10" [pid 5830] <... close resumed>) = 0 [pid 5829] mkdir("./11", 0777 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... rmdir resumed>) = 0 [pid 5830] rmdir("./10" [pid 5829] <... mkdir resumed>) = 0 [pid 5894] set_robust_list(0x555557df1660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5894 ./strace-static-x86_64: Process 5895 attached [pid 5830] <... rmdir resumed>) = 0 [pid 5895] set_robust_list(0x555557df1660, 24 [pid 5832] mkdir("./11", 0777 [pid 5830] mkdir("./11", 0777 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5895] <... set_robust_list resumed>) = 0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5895 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5895] chdir("./11" [pid 5894] chdir("./11" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... openat resumed>) = 3 [pid 5894] <... chdir resumed>) = 0 [pid 5895] <... chdir resumed>) = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] <... prctl resumed>) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] <... ioctl resumed>) = 0 [pid 5894] write(3, "1000", 4 [pid 5895] <... prctl resumed>) = 0 [pid 5894] <... write resumed>) = 4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] close(3 [pid 5894] close(3 [pid 5895] setpgid(0, 0 [pid 5894] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... close resumed>) = 0 [pid 5895] <... setpgid resumed>) = 0 [pid 5832] close(3 [pid 5830] <... ioctl resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... symlink resumed>) = 0 [pid 5895] write(3, "1000", 4executing program ) = 4 [pid 5894] write(1, "executing program\n", 18 [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5894] <... write resumed>) = 18 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5896 attached executing program [pid 5896] set_robust_list(0x555557df1660, 24 [pid 5895] <... symlink resumed>) = 0 [pid 5894] memfd_create("syzkaller", 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5896 [pid 5896] <... set_robust_list resumed>) = 0 [pid 5894] <... memfd_create resumed>) = 3 [pid 5895] write(1, "executing program\n", 18 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5895] <... write resumed>) = 18 [pid 5896] chdir("./11" [pid 5895] memfd_create("syzkaller", 0 [pid 5894] <... mmap resumed>) = 0x7fd6d9800000 [pid 5895] <... memfd_create resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5895] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 5897 attached [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5898 attached [pid 5897] set_robust_list(0x555557df1660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5897 [pid 5897] <... set_robust_list resumed>) = 0 [pid 5897] chdir("./11" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5898 [pid 5898] set_robust_list(0x555557df1660, 24 [pid 5897] <... chdir resumed>) = 0 [pid 5898] <... set_robust_list resumed>) = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5898] chdir("./11" [pid 5897] <... prctl resumed>) = 0 [pid 5898] <... chdir resumed>) = 0 [pid 5897] setpgid(0, 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... setpgid resumed>) = 0 [pid 5898] <... prctl resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5898] setpgid(0, 0 [pid 5897] <... openat resumed>) = 3 [pid 5898] <... setpgid resumed>) = 0 [pid 5897] write(3, "1000", 4 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5897] <... write resumed>) = 4 [pid 5897] close(3 [pid 5898] <... openat resumed>) = 3 [pid 5897] <... close resumed>) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs" [pid 5898] write(3, "1000", 4 [pid 5897] <... symlink resumed>) = 0 [pid 5898] <... write resumed>) = 4 executing program [pid 5898] close(3 [pid 5897] write(1, "executing program\n", 18 [pid 5898] <... close resumed>) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs" [pid 5897] <... write resumed>) = 18 [pid 5898] <... symlink resumed>) = 0 [pid 5897] memfd_create("syzkaller", 0 [pid 5896] <... chdir resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 5898] write(1, "executing program\n", 18 [pid 5897] <... memfd_create resumed>) = 3 [pid 5896] <... prctl resumed>) = 0 [pid 5895] <... write resumed>) = 524288 [pid 5898] <... write resumed>) = 18 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5896] setpgid(0, 0) = 0 [pid 5897] <... mmap resumed>) = 0x7fd6d9800000 [pid 5898] memfd_create("syzkaller", 0 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] <... write resumed>) = 524288 [pid 5898] <... memfd_create resumed>) = 3 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5896] <... openat resumed>) = 3 [pid 5898] <... mmap resumed>) = 0x7fd6d9800000 [pid 5896] write(3, "1000", 4 [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5896] <... write resumed>) = 4 [pid 5894] munmap(0x7fd6d9800000, 138412032 [pid 5896] close(3 [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5896] <... close resumed>) = 0 [pid 5894] <... munmap resumed>) = 0 [pid 5896] symlink("/dev/binderfs", "./binderfs" [pid 5894] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 5896] <... symlink resumed>) = 0 [pid 5896] write(1, "executing program\n", 18 [pid 5894] <... openat resumed>) = 4 [pid 5896] <... write resumed>) = 18 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5896] memfd_create("syzkaller", 0 [pid 5895] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5897] <... write resumed>) = 524288 [pid 5895] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5894] <... ioctl resumed>) = 0 [pid 5896] <... memfd_create resumed>) = 3 [pid 5895] <... openat resumed>) = 4 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5898] <... write resumed>) = 524288 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5897] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5897] ioctl(4, LOOP_SET_FD, 3 [pid 5898] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [pid 5895] mkdir("./file1", 0777) = 0 [pid 5895] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5894] close(3) = 0 [pid 5897] <... ioctl resumed>) = 0 [pid 5895] <... mount resumed>) = 0 [pid 5894] close(4 [pid 5897] close(3 [pid 5895] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5897] <... close resumed>) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] <... close resumed>) = 0 [pid 5897] close(4 [pid 5895] chdir("./file1") = 0 [pid 5897] <... close resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5897] mkdir("./file1", 0777 [pid 5896] <... write resumed>) = 524288 [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5894] mkdir("./file1", 0777 [pid 5897] <... mkdir resumed>) = 0 [pid 5895] chdir("./file0" [pid 5897] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5895] <... chdir resumed>) = 0 [pid 5894] <... mkdir resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5894] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5898] <... ioctl resumed>) = 0 [pid 5897] <... mount resumed>) = 0 [pid 5896] munmap(0x7fd6d9800000, 138412032 [pid 5895] <... openat resumed>) = 4 [pid 5898] close(3 [pid 5897] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5898] <... close resumed>) = 0 [pid 5897] <... openat resumed>) = 3 [pid 5896] <... munmap resumed>) = 0 [pid 5895] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5898] close(4 [pid 5897] chdir("./file1" [pid 5896] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5898] <... close resumed>) = 0 [pid 5897] <... chdir resumed>) = 0 [pid 5898] mkdir("./file1", 0777 [pid 5897] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5896] <... openat resumed>) = 4 [pid 5898] <... mkdir resumed>) = 0 [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 62.704024][ T5894] loop2: detected capacity change from 0 to 1024 [ 62.711668][ T5895] loop4: detected capacity change from 0 to 1024 [ 62.726887][ T5897] loop3: detected capacity change from 0 to 1024 [ 62.737130][ T5898] loop1: detected capacity change from 0 to 1024 [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5895] <... creat resumed>) = 5 [pid 5897] chdir("./file0" [pid 5898] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5895] sync( [pid 5897] <... chdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5897] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5898] <... mount resumed>) = 0 [pid 5898] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5894] <... mount resumed>) = 0 [pid 5898] chdir("./file1") = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5897] <... creat resumed>) = 5 [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5898] chdir("./file0" [pid 5894] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] <... ioctl resumed>) = 0 [pid 5894] chdir("./file1" [pid 5896] close(3 [pid 5894] <... chdir resumed>) = 0 [pid 5898] <... chdir resumed>) = 0 [pid 5897] sync( [pid 5896] <... close resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5896] close(4 [pid 5894] chdir("./file0" [pid 5898] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5896] <... close resumed>) = 0 [pid 5896] mkdir("./file1", 0777) = 0 [pid 5896] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5898] <... openat resumed>) = 4 [pid 5894] <... chdir resumed>) = 0 [pid 5898] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5894] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5894] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5898] <... creat resumed>) = 5 [ 62.776294][ T5896] loop0: detected capacity change from 0 to 1024 [pid 5898] sync( [pid 5896] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file1") = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5894] <... creat resumed>) = 5 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5896] chdir("./file0" [pid 5895] <... sync resumed>) = 0 [pid 5895] exit_group(0) = ? [pid 5896] <... chdir resumed>) = 0 [pid 5894] sync( [pid 5896] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5895] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5896] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./11/binderfs") = 0 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5896] <... creat resumed>) = 5 [pid 5898] <... sync resumed>) = 0 [pid 5897] <... sync resumed>) = 0 [pid 5894] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5896] sync( [pid 5894] exit_group(0) = ? [pid 5898] exit_group(0 [pid 5897] exit_group(0 [pid 5894] +++ exited with 0 +++ [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5898] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] <... exit_group resumed>) = ? [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5898] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5897] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5896] <... sync resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5833] newfstatat(4, "", [pid 5832] <... restart_syscall resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] exit_group(0) = ? [pid 5833] getdents64(4, [pid 5832] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(4, [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5832] getdents64(3, [pid 5896] +++ exited with 0 +++ [pid 5833] rmdir("./11/file1" [pid 5831] newfstatat(3, "", [pid 5830] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5831] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(3, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5829] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./11/binderfs" [pid 5829] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5832] unlink("./11/binderfs" [pid 5833] close(3 [pid 5831] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./11" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5829] unlink("./11/binderfs" [pid 5833] mkdir("./12", 0777 [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./11/file1", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./11/file1", [pid 5831] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./11/binderfs" [pid 5829] <... unlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... ioctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5833] close(3 [pid 5832] newfstatat(4, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./11/file1" [pid 5832] getdents64(4, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] getdents64(4, [pid 5830] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5899 attached [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./11/file1", [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5899 [pid 5832] close(4 [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./11/file1", [pid 5899] set_robust_list(0x555557df1660, 24 [pid 5832] <... close resumed>) = 0 [pid 5831] rmdir("./11" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5832] rmdir("./11/file1" [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5899] chdir("./12" [pid 5831] mkdir("./12", 0777 [pid 5899] <... chdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, [pid 5829] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... openat resumed>) = 4 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] rmdir("./11" [pid 5831] <... mkdir resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 5899] <... prctl resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5899] setpgid(0, 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 5899] <... setpgid resumed>) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5899] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5899] write(3, "1000", 4 [pid 5831] close(3 [pid 5829] getdents64(4, [pid 5899] <... write resumed>) = 4 [pid 5830] getdents64(4, [pid 5899] close(3 [pid 5831] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5899] <... close resumed>) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5899] write(1, "executing program\n", 18 [pid 5832] mkdir("./12", 0777 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5899] <... write resumed>) = 18 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5899] memfd_create("syzkaller", 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] close(4 [pid 5829] close(4 [pid 5899] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 5900 attached [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5900] set_robust_list(0x555557df1660, 24 [pid 5899] <... mmap resumed>) = 0x7fd6d9800000 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] rmdir("./11/file1" [pid 5829] rmdir("./11/file1" [pid 5900] chdir("./12" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5900 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5900] <... chdir resumed>) = 0 [pid 5832] close(3 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5900] <... prctl resumed>) = 0 [pid 5830] getdents64(3, [pid 5900] setpgid(0, 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 5900] <... setpgid resumed>) = 0 [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5900] write(3, "1000", 4 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 5900] <... write resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./11" [pid 5900] close(3) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5900] write(1, "executing program\n", 18executing program ) = 18 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(3) = 0 [pid 5900] memfd_create("syzkaller", 0 [pid 5830] mkdir("./12", 0777 [pid 5829] rmdir("./11") = 0 [pid 5900] <... memfd_create resumed>) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] mkdir("./12", 0777 [pid 5899] <... write resumed>) = 524288 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... mkdir resumed>) = 0 [pid 5900] <... write resumed>) = 524288 [pid 5899] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5901 attached [pid 5899] <... munmap resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... openat resumed>) = 3 [pid 5901] set_robust_list(0x555557df1660, 24 [pid 5899] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5901 [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5899] <... openat resumed>) = 4 [pid 5829] <... ioctl resumed>) = 0 [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5829] close(3 [pid 5901] <... set_robust_list resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... close resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5901] chdir("./12" [pid 5900] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5901] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557df1650) = 5902 ./strace-static-x86_64: Process 5902 attached [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] <... ioctl resumed>) = 0 [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] mkdir("./file1", 0777) = 0 [pid 5899] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5900] <... ioctl resumed>) = 0 [pid 5902] set_robust_list(0x555557df1660, 24 [pid 5901] setpgid(0, 0 [pid 5899] <... mount resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5899] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file1") = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5899] chdir("./file0" [pid 5900] close(3) = 0 [pid 5901] <... setpgid resumed>) = 0 [pid 5900] close(4) = 0 [pid 5899] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5903 attached [pid 5902] <... set_robust_list resumed>) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] mkdir("./file1", 0777 [pid 5899] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5902] chdir("./12" [pid 5901] <... openat resumed>) = 3 [pid 5900] <... mkdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5903 [pid 5902] <... chdir resumed>) = 0 [pid 5901] write(3, "1000", 4 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5901] <... write resumed>) = 4 [pid 5902] <... prctl resumed>) = 0 [ 63.056864][ T5899] loop4: detected capacity change from 0 to 1024 [ 63.066080][ T5900] loop2: detected capacity change from 0 to 1024 [pid 5901] close(3 [pid 5903] set_robust_list(0x555557df1660, 24 [pid 5902] setpgid(0, 0 [pid 5901] <... close resumed>) = 0 [pid 5900] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5902] <... setpgid resumed>) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs" [pid 5903] <... set_robust_list resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5901] <... symlink resumed>) = 0 [pid 5903] chdir("./12" [pid 5902] <... openat resumed>) = 3 [pid 5901] write(1, "executing program\n", 18 [pid 5903] <... chdir resumed>) = 0 [pid 5902] write(3, "1000", 4 [pid 5900] <... mount resumed>) = 0 [pid 5899] <... openat resumed>) = 4 executing program [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5902] <... write resumed>) = 4 [pid 5901] <... write resumed>) = 18 [pid 5900] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5899] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5903] <... prctl resumed>) = 0 [pid 5902] close(3 [pid 5901] memfd_create("syzkaller", 0 [pid 5900] <... openat resumed>) = 3 [pid 5903] setpgid(0, 0 [pid 5902] <... close resumed>) = 0 [pid 5901] <... memfd_create resumed>) = 3 [pid 5900] chdir("./file1" [pid 5899] <... creat resumed>) = 5 [pid 5903] <... setpgid resumed>) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5900] <... chdir resumed>) = 0 [pid 5899] sync( [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] <... symlink resumed>) = 0 [pid 5901] <... mmap resumed>) = 0x7fd6d9800000 executing program [pid 5900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5902] write(1, "executing program\n", 18) = 18 [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5903] <... openat resumed>) = 3 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] write(3, "1000", 4 [pid 5902] <... mmap resumed>) = 0x7fd6d9800000 [pid 5900] chdir("./file0" [pid 5903] <... write resumed>) = 4 [pid 5899] <... sync resumed>) = 0 [pid 5903] close(3) = 0 [pid 5899] exit_group(0 [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5900] <... chdir resumed>) = 0 [pid 5899] <... exit_group resumed>) = ? [pid 5900] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5903] <... symlink resumed>) = 0 [pid 5899] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 63.105761][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 63.105778][ T29] audit: type=1800 audit(1730647662.747:62): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 5833] restart_syscall(<... resuming interrupted clone ...>executing program [pid 5903] write(1, "executing program\n", 18) = 18 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5901] <... write resumed>) = 524288 [pid 5900] <... openat resumed>) = 4 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5903] memfd_create("syzkaller", 0 [pid 5900] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5901] munmap(0x7fd6d9800000, 138412032 [pid 5903] <... memfd_create resumed>) = 3 [pid 5901] <... munmap resumed>) = 0 [pid 5900] <... creat resumed>) = 5 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5902] <... write resumed>) = 524288 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5900] sync( [pid 5833] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5903] <... mmap resumed>) = 0x7fd6d9800000 [pid 5902] munmap(0x7fd6d9800000, 138412032 [pid 5901] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] <... munmap resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5901] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./12/binderfs") = 0 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5902] <... openat resumed>) = 4 [pid 5901] <... ioctl resumed>) = 0 [pid 5900] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5901] close(3 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] <... close resumed>) = 0 [pid 5900] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 63.174529][ T29] audit: type=1800 audit(1730647662.817:63): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 63.205838][ T5901] loop3: detected capacity change from 0 to 1024 [pid 5901] close(4 [pid 5833] newfstatat(AT_FDCWD, "./12/file1", [pid 5901] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] mkdir("./file1", 0777 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] getdents64(4, [pid 5902] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5903] <... write resumed>) = 524288 [pid 5902] close(3 [pid 5901] <... mount resumed>) = 0 [pid 5900] <... exit_group resumed>) = ? [pid 5833] rmdir("./12/file1" [pid 5903] munmap(0x7fd6d9800000, 138412032 [pid 5902] <... close resumed>) = 0 [pid 5901] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... rmdir resumed>) = 0 [pid 5901] <... openat resumed>) = 3 [pid 5901] chdir("./file1") = 0 [pid 5903] <... munmap resumed>) = 0 [pid 5902] close(4 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5900] +++ exited with 0 +++ [pid 5833] getdents64(3, [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] <... close resumed>) = 0 [pid 5903] <... openat resumed>) = 4 [pid 5902] mkdir("./file1", 0777 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5903] ioctl(4, LOOP_SET_FD, 3 [pid 5902] <... mkdir resumed>) = 0 [pid 5901] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [ 63.223085][ T5902] loop0: detected capacity change from 0 to 1024 [pid 5831] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5902] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./12/binderfs") = 0 [pid 5903] <... ioctl resumed>) = 0 [pid 5902] <... mount resumed>) = 0 [pid 5901] chdir("./file0" [pid 5833] close(3 [pid 5903] close(3 [pid 5902] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5903] <... close resumed>) = 0 [pid 5902] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5903] close(4 [pid 5901] <... chdir resumed>) = 0 [ 63.257734][ T5903] loop1: detected capacity change from 0 to 1024 [pid 5833] rmdir("./12" [pid 5903] <... close resumed>) = 0 [pid 5902] chdir("./file1" [pid 5901] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5903] mkdir("./file1", 0777 [pid 5902] <... chdir resumed>) = 0 [pid 5903] <... mkdir resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5901] <... openat resumed>) = 4 [pid 5901] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] mkdir("./13", 0777 [pid 5903] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5902] chdir("./file0" [pid 5831] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./12/file1", [pid 5902] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... mkdir resumed>) = 0 [pid 5902] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] <... creat resumed>) = 5 [pid 5831] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5903] <... mount resumed>) = 0 [pid 5902] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5901] sync( [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] newfstatat(4, "", [pid 5903] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5903] chdir("./file1") = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5903] chdir("./file0") = 0 [ 63.294276][ T29] audit: type=1800 audit(1730647662.937:64): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [ 63.322239][ T29] audit: type=1800 audit(1730647662.957:65): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5903] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5903] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] getdents64(4, [pid 5833] <... ioctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5903] <... creat resumed>) = 5 [pid 5833] close(3 [pid 5831] getdents64(4, [pid 5903] sync( [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5902] <... creat resumed>) = 5 [pid 5831] rmdir("./12/file1"./strace-static-x86_64: Process 5904 attached [pid 5902] sync( [pid 5904] set_robust_list(0x555557df1660, 24) = 0 [pid 5903] <... sync resumed>) = 0 [pid 5901] <... sync resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5904 [pid 5831] <... rmdir resumed>) = 0 [pid 5904] chdir("./13" [pid 5903] exit_group(0 [ 63.342675][ T29] audit: type=1800 audit(1730647662.957:66): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5901] exit_group(0 [pid 5903] <... exit_group resumed>) = ? [pid 5831] getdents64(3, [pid 5904] <... chdir resumed>) = 0 [pid 5901] <... exit_group resumed>) = ? [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5901] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5903] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5904] <... prctl resumed>) = 0 [pid 5902] <... sync resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] close(3 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5904] setpgid(0, 0 [pid 5831] <... close resumed>) = 0 [pid 5904] <... setpgid resumed>) = 0 [pid 5902] exit_group(0 [pid 5831] rmdir("./12" [pid 5902] <... exit_group resumed>) = ? [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... rmdir resumed>) = 0 [pid 5902] +++ exited with 0 +++ [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5904] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5831] mkdir("./13", 0777 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] write(3, "1000", 4 [pid 5832] newfstatat(3, "", [pid 5830] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] <... write resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5904] close(3 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5904] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] newfstatat(3, "", [pid 5904] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5904] <... symlink resumed>) = 0 [pid 5832] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... ioctl resumed>) = 0 [pid 5904] write(1, "executing program\n", 18executing program [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] close(3 [pid 5904] <... write resumed>) = 18 [pid 5832] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5830] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5904] memfd_create("syzkaller", 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5832] unlink("./12/binderfs") = 0 [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5904] <... memfd_create resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5830] unlink("./12/binderfs" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] unlink("./12/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5829] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5829] newfstatat(AT_FDCWD, "./12/file1", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5905 attached [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5905] set_robust_list(0x555557df1660, 24 [pid 5904] <... write resumed>) = 524288 [pid 5832] <... close resumed>) = 0 [pid 5830] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] rmdir("./12/file1" [pid 5829] <... openat resumed>) = 4 [pid 5904] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5905 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5905] <... set_robust_list resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] newfstatat(AT_FDCWD, "./12/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5905] chdir("./13" [pid 5904] <... munmap resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(4, [pid 5905] <... chdir resumed>) = 0 [pid 5832] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... close resumed>) = 0 [pid 5829] getdents64(4, [pid 5905] <... prctl resumed>) = 0 [pid 5832] rmdir("./12" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5905] setpgid(0, 0 [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5830] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5905] <... setpgid resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5904] <... openat resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./12/file1" [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5832] mkdir("./13", 0777 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5832] <... mkdir resumed>) = 0 [pid 5905] <... openat resumed>) = 3 [pid 5904] <... ioctl resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5905] write(3, "1000", 4 [pid 5904] close(3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5905] <... write resumed>) = 4 [pid 5904] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] close(3 [pid 5905] close(3 [pid 5904] close(4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 5905] <... close resumed>) = 0 [pid 5904] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5904] mkdir("./file1", 0777 [pid 5830] close(4 [pid 5905] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./12" [pid 5905] <... symlink resumed>) = 0 [pid 5904] <... mkdir resumed>) = 0 [pid 5832] close(3 [pid 5830] rmdir("./12/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 5904] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 executing program [pid 5905] write(1, "executing program\n", 18 [pid 5830] getdents64(3, [pid 5829] mkdir("./13", 0777 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5905] <... write resumed>) = 18 [pid 5830] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 5905] memfd_create("syzkaller", 0 [pid 5830] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] rmdir("./12" [pid 5905] <... memfd_create resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5905] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... ioctl resumed>) = 0 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5904] <... mount resumed>) = 0 [pid 5830] mkdir("./13", 0777 [pid 5829] close(3 [pid 5904] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./file1") = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5906 attached ) = -1 EBUSY (Device or resource busy) [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5906] set_robust_list(0x555557df1660, 24) = 0 [pid 5904] chdir("./file0" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5906 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5906] chdir("./13" [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] <... chdir resumed>) = 0 [pid 5905] <... write resumed>) = 524288 [pid 5904] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5904] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5907 attached [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5907 ./strace-static-x86_64: Process 5908 attached [pid 5906] setpgid(0, 0 [pid 5904] <... openat resumed>) = 4 [ 63.470528][ T5904] loop4: detected capacity change from 0 to 1024 [pid 5908] set_robust_list(0x555557df1660, 24 [pid 5907] set_robust_list(0x555557df1660, 24 [pid 5906] <... setpgid resumed>) = 0 [pid 5904] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5908 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5908] chdir("./13" [pid 5905] munmap(0x7fd6d9800000, 138412032 [pid 5908] <... chdir resumed>) = 0 [pid 5905] <... munmap resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5905] <... openat resumed>) = 4 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5908] <... prctl resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5908] setpgid(0, 0 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5908] <... setpgid resumed>) = 0 [pid 5907] chdir("./13" [pid 5906] <... openat resumed>) = 3 executing program [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5907] <... chdir resumed>) = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] write(1, "executing program\n", 18) = 18 [pid 5907] memfd_create("syzkaller", 0) = 3 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5906] write(3, "1000", 4 [pid 5908] <... openat resumed>) = 3 [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] <... write resumed>) = 4 [pid 5904] <... creat resumed>) = 5 [pid 5906] close(3) = 0 [pid 5904] sync( [pid 5905] <... ioctl resumed>) = 0 [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] mkdir("./file1", 0777 [pid 5906] symlink("/dev/binderfs", "./binderfs" [pid 5905] <... mkdir resumed>) = 0 [pid 5905] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5906] <... symlink resumed>) = 0 [pid 5908] write(3, "1000", 4 [pid 5906] write(1, "executing program\n", 18executing program [pid 5908] <... write resumed>) = 4 [pid 5906] <... write resumed>) = 18 [pid 5908] close(3) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5908] symlink("/dev/binderfs", "./binderfs" [pid 5905] <... mount resumed>) = 0 [pid 5908] <... symlink resumed>) = 0 [pid 5905] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5908] write(1, "executing program\n", 18 [pid 5907] <... write resumed>) = 524288 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5905] <... openat resumed>) = 3 [pid 5905] chdir("./file1") = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 5908] <... write resumed>) = 18 [pid 5906] <... mmap resumed>) = 0x7fd6d9800000 [pid 5905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5904] <... sync resumed>) = 0 [pid 5905] chdir("./file0" [pid 5904] exit_group(0 [pid 5907] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5908] memfd_create("syzkaller", 0 [pid 5905] <... chdir resumed>) = 0 [pid 5908] <... memfd_create resumed>) = 3 [pid 5905] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5904] <... exit_group resumed>) = ? [pid 5905] <... openat resumed>) = 4 [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5905] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5907] <... openat resumed>) = 4 [pid 5904] +++ exited with 0 +++ [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 63.521669][ T29] audit: type=1800 audit(1730647663.157:67): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 63.549898][ T5905] loop2: detected capacity change from 0 to 1024 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5908] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5905] <... creat resumed>) = 5 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5905] sync( [pid 5833] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... ioctl resumed>) = 0 [pid 5908] <... write resumed>) = 524288 [pid 5906] <... write resumed>) = 524288 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5905] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5905] exit_group(0 [pid 5833] newfstatat(3, "", [pid 5905] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5906] munmap(0x7fd6d9800000, 138412032 [pid 5833] getdents64(3, [pid 5906] <... munmap resumed>) = 0 [pid 5905] +++ exited with 0 +++ [pid 5906] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5906] <... openat resumed>) = 4 [ 63.602202][ T5907] loop0: detected capacity change from 0 to 1024 [ 63.609838][ T29] audit: type=1800 audit(1730647663.237:68): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5908] munmap(0x7fd6d9800000, 138412032 [pid 5907] close(3 [pid 5833] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] <... munmap resumed>) = 0 [pid 5907] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5907] close(4 [pid 5833] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5908] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5908] ioctl(4, LOOP_SET_FD, 3 [pid 5907] <... close resumed>) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5833] unlink("./13/binderfs") = 0 [pid 5908] <... ioctl resumed>) = 0 [pid 5907] mkdir("./file1", 0777 [pid 5906] close(3 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] close(3 [pid 5906] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5906] close(4 [pid 5831] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5906] <... close resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5906] mkdir("./file1", 0777 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5907] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5907] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5906] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5908] <... close resumed>) = 0 [pid 5906] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... umount2 resumed>) = 0 [pid 5831] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] close(4 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] mkdir("./file1", 0777 [pid 5833] newfstatat(AT_FDCWD, "./13/file1", [pid 5831] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] <... mkdir resumed>) = 0 [pid 5907] <... mount resumed>) = 0 [pid 5833] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5907] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./13/binderfs" [pid 5907] <... openat resumed>) = 3 [pid 5906] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] chdir("./file1" [pid 5906] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... openat resumed>) = 4 [pid 5831] <... unlink resumed>) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5906] chdir("./file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] getdents64(4, [pid 5907] chdir("./file0" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5906] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5907] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] close(4 [pid 5907] <... openat resumed>) = 4 [ 63.652249][ T5906] loop3: detected capacity change from 0 to 1024 [ 63.659885][ T5908] loop1: detected capacity change from 0 to 1024 [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... close resumed>) = 0 [pid 5907] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5906] chdir("./file0" [pid 5907] <... creat resumed>) = 5 [pid 5906] <... chdir resumed>) = 0 [pid 5833] rmdir("./13/file1" [pid 5831] <... umount2 resumed>) = 0 [pid 5907] sync( [pid 5906] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5831] newfstatat(AT_FDCWD, "./13/file1", [pid 5833] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] rmdir("./13" [pid 5908] <... mount resumed>) = 0 [pid 5906] <... openat resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5908] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] <... openat resumed>) = 3 [pid 5906] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] mkdir("./14", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5908] chdir("./file1" [pid 5907] <... sync resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5908] <... chdir resumed>) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5907] exit_group(0 [pid 5831] newfstatat(4, "", [pid 5908] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5907] <... exit_group resumed>) = ? [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5908] chdir("./file0" [pid 5907] +++ exited with 0 +++ [pid 5906] <... creat resumed>) = 5 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] getdents64(4, [pid 5833] <... ioctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5906] sync( [pid 5833] close(3 [pid 5831] getdents64(4, [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./13/file1") = 0 [pid 5829] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5908] <... chdir resumed>) = 0 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5831] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [ 63.700574][ T29] audit: type=1800 audit(1730647663.337:69): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [ 63.730813][ T29] audit: type=1800 audit(1730647663.367:70): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5829] unlink("./13/binderfs" [pid 5908] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] close(3./strace-static-x86_64: Process 5909 attached ) = 0 [pid 5831] rmdir("./13" [pid 5909] set_robust_list(0x555557df1660, 24 [pid 5908] <... openat resumed>) = 4 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5909 [pid 5829] <... unlink resumed>) = 0 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5908] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5909] chdir("./14" [pid 5831] mkdir("./14", 0777 [pid 5909] <... chdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5909] <... openat resumed>) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5909] write(1, "executing program\n", 18 [pid 5831] <... ioctl resumed>) = 0 [pid 5909] <... write resumed>) = 18 [pid 5831] close(3 [pid 5909] memfd_create("syzkaller", 0 [pid 5908] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 5908] sync( [pid 5909] <... memfd_create resumed>) = 3 [pid 5906] <... sync resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5906] exit_group(0 [pid 5829] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5909] <... mmap resumed>) = 0x7fd6d9800000 [pid 5906] <... exit_group resumed>) = ? [pid 5908] <... sync resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5908] exit_group(0 [pid 5906] +++ exited with 0 +++ [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] newfstatat(AT_FDCWD, "./13/file1", [pid 5908] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] +++ exited with 0 +++ [pid 5829] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... restart_syscall resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(4, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5829] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(4 [pid 5832] unlink("./13/binderfs") = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./13/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [ 63.784438][ T29] audit: type=1800 audit(1730647663.427:71): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5829] rmdir("./13" [pid 5832] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5910 attached [pid 5909] <... write resumed>) = 524288 [pid 5830] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5910 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] mkdir("./14", 0777 [pid 5910] set_robust_list(0x555557df1660, 24 [pid 5909] munmap(0x7fd6d9800000, 138412032 [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... mkdir resumed>) = 0 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5909] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5910] chdir("./14" [pid 5832] newfstatat(AT_FDCWD, "./13/file1", [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5910] <... chdir resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(3, "", [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] <... openat resumed>) = 4 [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5910] <... prctl resumed>) = 0 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5829] close(3 [pid 5910] setpgid(0, 0 [pid 5832] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5910] <... setpgid resumed>) = 0 [pid 5909] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5830] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5910] <... openat resumed>) = 3 [pid 5909] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 5910] write(3, "1000", 4 [pid 5909] close(4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, executing program [pid 5830] unlink("./13/binderfs" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5909] <... close resumed>) = 0 [pid 5909] mkdir("./file1", 0777 [pid 5830] <... unlink resumed>) = 0 [pid 5832] close(4 [pid 5909] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5910] <... write resumed>) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5909] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] memfd_create("syzkaller", 0 [pid 5832] rmdir("./13/file1" [pid 5830] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, ./strace-static-x86_64: Process 5911 attached 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5911] set_robust_list(0x555557df1660, 24 [pid 5832] <... close resumed>) = 0 [pid 5911] <... set_robust_list resumed>) = 0 [pid 5832] rmdir("./13" [pid 5910] <... memfd_create resumed>) = 3 [pid 5911] chdir("./14" [pid 5909] <... mount resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5911 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5909] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file1" [pid 5911] <... chdir resumed>) = 0 [pid 5832] mkdir("./14", 0777 [pid 5909] <... chdir resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5909] chdir("./file0" [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... mkdir resumed>) = 0 [pid 5911] <... prctl resumed>) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5911] write(3, "1000", 4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5911] <... write resumed>) = 4 [pid 5832] <... ioctl resumed>) = 0 [pid 5911] close(3 [pid 5832] close(3 [pid 5911] <... close resumed>) = 0 [pid 5909] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5909] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5911] <... symlink resumed>) = 0 [ 63.864538][ T5909] loop4: detected capacity change from 0 to 1024 [pid 5830] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5911] write(1, "executing program\n", 18 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] <... write resumed>) = 18 ./strace-static-x86_64: Process 5912 attached [pid 5911] memfd_create("syzkaller", 0 [pid 5910] <... write resumed>) = 524288 [pid 5830] newfstatat(AT_FDCWD, "./13/file1", [pid 5912] set_robust_list(0x555557df1660, 24 [pid 5911] <... memfd_create resumed>) = 3 [pid 5912] <... set_robust_list resumed>) = 0 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] chdir("./14" [pid 5911] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./13/file1") = 0 [pid 5830] getdents64(3, [pid 5910] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5912] <... chdir resumed>) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./13" [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] <... munmap resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5912 [pid 5912] <... prctl resumed>) = 0 [pid 5912] setpgid(0, 0 [pid 5910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... rmdir resumed>) = 0 [pid 5912] <... setpgid resumed>) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] <... creat resumed>) = 5 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5830] mkdir("./14", 0777 [pid 5912] <... openat resumed>) = 3 [pid 5912] write(3, "1000", 4 [pid 5830] <... mkdir resumed>) = 0 [pid 5912] <... write resumed>) = 4 [pid 5912] close(3 [pid 5909] sync( [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5912] <... close resumed>) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs" [pid 5911] <... write resumed>) = 524288 [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FDexecuting program [pid 5912] <... symlink resumed>) = 0 [pid 5911] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... ioctl resumed>) = 0 [pid 5912] write(1, "executing program\n", 18 [pid 5830] close(3 [pid 5912] <... write resumed>) = 18 [pid 5911] <... munmap resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5912] memfd_create("syzkaller", 0 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5912] <... memfd_create resumed>) = 3 [pid 5911] <... openat resumed>) = 4 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5913 [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file1", 0777) = 0 [pid 5910] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5912] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 5913 attached [pid 5910] <... mount resumed>) = 0 [pid 5910] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] chdir("./file1") = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5910] chdir("./file0" [pid 5913] set_robust_list(0x555557df1660, 24) = 0 [pid 5913] chdir("./14") = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5911] <... ioctl resumed>) = 0 [pid 5910] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5909] <... sync resumed>) = 0 [pid 5913] <... openat resumed>) = 3 [pid 5911] close(3 [pid 5910] <... openat resumed>) = 4 [pid 5909] exit_group(0 [pid 5913] write(3, "1000", 4 [pid 5911] <... close resumed>) = 0 [pid 5913] <... write resumed>) = 4 [pid 5911] close(4 [pid 5913] close(3 [pid 5911] <... close resumed>) = 0 [pid 5909] <... exit_group resumed>) = ? [pid 5913] <... close resumed>) = 0 [pid 5911] mkdir("./file1", 0777 [pid 5909] +++ exited with 0 +++ [pid 5913] symlink("/dev/binderfs", "./binderfs" [pid 5910] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000executing program [pid 5913] <... symlink resumed>) = 0 [pid 5911] <... mkdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5913] write(1, "executing program\n", 18 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5913] <... write resumed>) = 18 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] <... write resumed>) = 524288 [pid 5913] <... mmap resumed>) = 0x7fd6d9800000 [ 63.945036][ T5910] loop2: detected capacity change from 0 to 1024 [ 63.976719][ T5911] loop0: detected capacity change from 0 to 1024 [pid 5910] <... creat resumed>) = 5 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5912] munmap(0x7fd6d9800000, 138412032 [pid 5911] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... restart_syscall resumed>) = 0 [pid 5912] <... munmap resumed>) = 0 [pid 5910] sync( [pid 5913] <... write resumed>) = 524288 [pid 5912] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] munmap(0x7fd6d9800000, 138412032 [pid 5912] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5912] ioctl(4, LOOP_SET_FD, 3 [pid 5833] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", [pid 5913] <... munmap resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] getdents64(3, [pid 5913] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5913] ioctl(4, LOOP_SET_FD, 3 [pid 5833] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./14/binderfs") = 0 [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5913] <... ioctl resumed>) = 0 [pid 5912] <... ioctl resumed>) = 0 [pid 5911] <... mount resumed>) = 0 [pid 5910] <... sync resumed>) = 0 [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] close(3 [pid 5912] close(3 [pid 5911] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5910] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5913] <... close resumed>) = 0 [pid 5912] <... close resumed>) = 0 [pid 5911] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./14/file1", [pid 5913] close(4 [pid 5912] close(4 [pid 5911] chdir("./file1" [pid 5910] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5913] <... close resumed>) = 0 [pid 5911] <... chdir resumed>) = 0 [pid 5913] mkdir("./file1", 0777 [pid 5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5912] <... close resumed>) = 0 [pid 5912] mkdir("./file1", 0777) = 0 [pid 5911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5912] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5910] +++ exited with 0 +++ [pid 5911] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./14/file1") = 0 [pid 5913] <... mkdir resumed>) = 0 [ 64.040442][ T5912] loop3: detected capacity change from 0 to 1024 [ 64.049438][ T5913] loop1: detected capacity change from 0 to 1024 [pid 5911] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5913] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5911] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5912] <... mount resumed>) = 0 [pid 5833] close(3 [pid 5912] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5911] <... openat resumed>) = 4 [pid 5833] rmdir("./14" [pid 5912] chdir("./file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5912] <... chdir resumed>) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] mkdir("./15", 0777 [pid 5912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5911] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] <... mount resumed>) = 0 [pid 5912] chdir("./file0" [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5911] <... creat resumed>) = 5 [pid 5833] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5913] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... openat resumed>) = 3 [pid 5913] chdir("./file1" [pid 5911] sync( [pid 5833] <... ioctl resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5913] <... chdir resumed>) = 0 [pid 5912] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5913] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5912] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... close resumed>) = 0 [pid 5913] chdir("./file0" [pid 5912] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./14/binderfs") = 0 [pid 5831] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] <... chdir resumed>) = 0 [pid 5913] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5912] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5913] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5912] <... creat resumed>) = 5 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5913] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./14/file1"./strace-static-x86_64: Process 5914 attached [pid 5912] sync( [pid 5914] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5914 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5914] chdir("./15" [pid 5913] <... creat resumed>) = 5 [pid 5911] <... sync resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5914] <... chdir resumed>) = 0 [pid 5913] sync( [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5911] exit_group(0 [pid 5831] getdents64(3, [pid 5914] <... prctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5911] <... exit_group resumed>) = ? [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5911] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] close(3 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5914] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 5914] write(3, "1000", 4 [pid 5831] rmdir("./14" [pid 5914] <... write resumed>) = 4 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5914] close(3) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] symlink("/dev/binderfs", "./binderfs" [pid 5829] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] mkdir("./15", 0777 [pid 5914] <... symlink resumed>) = 0 [pid 5913] <... sync resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5913] exit_group(0 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5914] write(1, "executing program\n", 18 [pid 5829] getdents64(3, executing program [pid 5914] <... write resumed>) = 18 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5914] memfd_create("syzkaller", 0 [pid 5913] <... exit_group resumed>) = ? [pid 5831] <... openat resumed>) = 3 [pid 5829] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5912] <... sync resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5831] <... ioctl resumed>) = 0 [pid 5912] exit_group(0 [pid 5914] <... memfd_create resumed>) = 3 [pid 5831] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5913] +++ exited with 0 +++ [pid 5912] <... exit_group resumed>) = ? [pid 5829] unlink("./14/binderfs") = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5914] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 5915 attached [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5912] +++ exited with 0 +++ [pid 5829] <... umount2 resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5915] set_robust_list(0x555557df1660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5915 [pid 5832] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5915] <... set_robust_list resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] chdir("./15" [pid 5832] <... openat resumed>) = 3 [pid 5829] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5915] <... chdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] getdents64(3, [pid 5829] newfstatat(AT_FDCWD, "./14/file1", [pid 5915] <... prctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] setpgid(0, 0 [pid 5830] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5915] <... setpgid resumed>) = 0 [pid 5832] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5830] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 5915] write(3, "1000", 4 [pid 5914] <... write resumed>) = 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5915] <... write resumed>) = 4 [pid 5830] newfstatat(3, "", [pid 5915] close(3 [pid 5832] unlink("./14/binderfs" [pid 5829] newfstatat(4, "", [pid 5915] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs" [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] getdents64(4, [pid 5914] munmap(0x7fd6d9800000, 138412032 [pid 5915] <... symlink resumed>) = 0 executing program [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5915] write(1, "executing program\n", 18 [pid 5830] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5915] <... write resumed>) = 18 [pid 5914] <... munmap resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5915] memfd_create("syzkaller", 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5915] <... memfd_create resumed>) = 3 [pid 5914] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(4 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5830] unlink("./14/binderfs") = 0 [pid 5915] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... close resumed>) = 0 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./14/file1" [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5914] <... ioctl resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./14/file1", [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(3) = 0 [pid 5829] rmdir("./14" [pid 5832] <... openat resumed>) = 4 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5914] close(3 [pid 5830] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5914] <... close resumed>) = 0 [pid 5829] mkdir("./15", 0777 [pid 5914] close(4 [pid 5830] newfstatat(AT_FDCWD, "./14/file1", [pid 5914] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./14/file1" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5914] mkdir("./file1", 0777 [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5914] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5914] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] close(3) = 0 [pid 5832] rmdir("./14") = 0 [pid 5832] mkdir("./15", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5830] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5915] <... write resumed>) = 524288 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5915] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5914] <... mount resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached [pid 5914] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5915] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5914] <... openat resumed>) = 3 [pid 5830] getdents64(4, [pid 5915] <... openat resumed>) = 4 [pid 5914] chdir("./file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5916] set_robust_list(0x555557df1660, 24 [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5914] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5916] <... set_robust_list resumed>) = 0 [pid 5915] <... ioctl resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5916 [pid 5916] chdir("./15" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] rmdir("./14/file1"./strace-static-x86_64: Process 5917 attached [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5917 [pid 5830] <... rmdir resumed>) = 0 [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./14" [pid 5917] set_robust_list(0x555557df1660, 24 [pid 5916] <... chdir resumed>) = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... rmdir resumed>) = 0 [pid 5916] <... prctl resumed>) = 0 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5916] setpgid(0, 0executing program [pid 5917] chdir("./15" [pid 5916] <... setpgid resumed>) = 0 [pid 5917] <... chdir resumed>) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5916] <... openat resumed>) = 3 [pid 5917] <... prctl resumed>) = 0 [pid 5916] write(3, "1000", 4 [pid 5917] setpgid(0, 0 [pid 5916] <... write resumed>) = 4 [pid 5917] <... setpgid resumed>) = 0 [pid 5916] close(3 [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] <... close resumed>) = 0 [pid 5917] <... openat resumed>) = 3 [pid 5916] symlink("/dev/binderfs", "./binderfs" [pid 5917] write(3, "1000", 4 [pid 5916] <... symlink resumed>) = 0 [pid 5917] <... write resumed>) = 4 [pid 5916] write(1, "executing program\n", 18 [pid 5917] close(3 [pid 5916] <... write resumed>) = 18 [pid 5917] <... close resumed>) = 0 [pid 5916] memfd_create("syzkaller", 0 [pid 5917] symlink("/dev/binderfs", "./binderfs" [pid 5916] <... memfd_create resumed>) = 3 [pid 5917] <... symlink resumed>) = 0 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5917] write(1, "executing program\n", 18 [pid 5916] <... mmap resumed>) = 0x7fd6d9800000 executing program [pid 5917] <... write resumed>) = 18 [pid 5914] chdir("./file0" [pid 5830] mkdir("./15", 0777 [pid 5917] memfd_create("syzkaller", 0) = 3 [pid 5830] <... mkdir resumed>) = 0 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5915] close(3 [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5915] <... close resumed>) = 0 [pid 5914] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5914] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5915] close(4) = 0 [pid 5915] mkdir("./file1", 0777) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5915] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5914] <... openat resumed>) = 4 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5914] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] close(3 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... close resumed>) = 0 [pid 5914] <... creat resumed>) = 5 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5915] <... mount resumed>) = 0 [pid 5915] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5914] sync( [pid 5915] <... openat resumed>) = 3 [pid 5915] chdir("./file1" [pid 5918] set_robust_list(0x555557df1660, 24 [pid 5915] <... chdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5918 [ 64.220522][ T5914] loop4: detected capacity change from 0 to 1024 [ 64.254638][ T5915] loop2: detected capacity change from 0 to 1024 [pid 5918] <... set_robust_list resumed>) = 0 [pid 5918] chdir("./15" [pid 5915] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5918] <... chdir resumed>) = 0 [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5915] chdir("./file0" [pid 5918] <... prctl resumed>) = 0 [pid 5915] <... chdir resumed>) = 0 [pid 5918] setpgid(0, 0 [pid 5917] <... write resumed>) = 524288 [pid 5916] <... write resumed>) = 524288 [pid 5915] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5918] <... setpgid resumed>) = 0 [pid 5916] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4 [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5917] munmap(0x7fd6d9800000, 138412032 [pid 5916] <... openat resumed>) = 4 [pid 5918] <... write resumed>) = 4 [pid 5917] <... munmap resumed>) = 0 [pid 5915] <... openat resumed>) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5918] write(1, "executing program\n", 18 [pid 5917] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5915] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5918] <... write resumed>) = 18 [pid 5918] memfd_create("syzkaller", 0 [pid 5917] <... openat resumed>) = 4 [pid 5916] <... ioctl resumed>) = 0 [pid 5917] ioctl(4, LOOP_SET_FD, 3 [pid 5918] <... memfd_create resumed>) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5916] close(3 [pid 5918] <... mmap resumed>) = 0x7fd6d9800000 [pid 5917] <... ioctl resumed>) = 0 [pid 5915] <... creat resumed>) = 5 [pid 5914] <... sync resumed>) = 0 [pid 5915] sync( [pid 5917] close(3 [pid 5916] <... close resumed>) = 0 [pid 5917] <... close resumed>) = 0 [pid 5916] close(4 [pid 5914] exit_group(0 [pid 5917] close(4 [pid 5916] <... close resumed>) = 0 [pid 5914] <... exit_group resumed>) = ? [pid 5916] mkdir("./file1", 0777 [pid 5914] +++ exited with 0 +++ [pid 5917] <... close resumed>) = 0 [pid 5916] <... mkdir resumed>) = 0 [pid 5917] mkdir("./file1", 0777) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5916] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5917] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5915] <... sync resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5915] exit_group(0) = ? [ 64.324532][ T5916] loop0: detected capacity change from 0 to 1024 [ 64.331553][ T5917] loop3: detected capacity change from 0 to 1024 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5916] <... mount resumed>) = 0 [pid 5915] +++ exited with 0 +++ [pid 5833] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5916] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5916] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5831] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5918] <... write resumed>) = 524288 [pid 5917] <... mount resumed>) = 0 [pid 5916] chdir("./file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5916] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5917] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5916] <... chdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5917] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./15/binderfs" [pid 5917] chdir("./file1" [pid 5831] getdents64(3, [pid 5917] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] chdir("./file0" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5918] munmap(0x7fd6d9800000, 138412032 [pid 5831] unlink("./15/binderfs" [pid 5918] <... munmap resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5918] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5916] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5917] <... chdir resumed>) = 0 [pid 5917] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5916] <... openat resumed>) = 4 [pid 5917] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... umount2 resumed>) = 0 [pid 5917] <... creat resumed>) = 5 [pid 5916] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(AT_FDCWD, "./15/file1", [pid 5831] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./15/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5918] <... ioctl resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5918] close(3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5916] <... creat resumed>) = 5 [pid 5833] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5916] sync( [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5918] <... close resumed>) = 0 [pid 5918] close(4 [pid 5833] close(4 [pid 5918] <... close resumed>) = 0 [pid 5918] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5918] <... mkdir resumed>) = 0 [pid 5833] rmdir("./15/file1" [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5918] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] rmdir("./15/file1" [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5918] <... mount resumed>) = 0 [pid 5833] close(3 [pid 5918] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] getdents64(3, [pid 5918] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5918] chdir("./file1" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5918] <... chdir resumed>) = 0 [pid 5917] <... sync resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] rmdir("./15" [pid 5831] close(3 [pid 5918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5916] <... sync resumed>) = 0 [pid 5918] chdir("./file0" [pid 5917] exit_group(0 [pid 5831] <... close resumed>) = 0 [pid 5918] <... chdir resumed>) = 0 [pid 5917] <... exit_group resumed>) = ? [pid 5916] exit_group(0 [pid 5833] <... rmdir resumed>) = 0 [pid 5916] <... exit_group resumed>) = ? [pid 5831] rmdir("./15") = 0 [pid 5833] mkdir("./16", 0777 [pid 5918] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5917] +++ exited with 0 +++ [pid 5833] <... mkdir resumed>) = 0 [pid 5831] mkdir("./16", 0777 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5918] <... openat resumed>) = 4 [pid 5918] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5916] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5832] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5918] <... creat resumed>) = 5 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 64.416424][ T5918] loop1: detected capacity change from 0 to 1024 [pid 5832] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5918] sync( [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] close(3 [pid 5829] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5829] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] newfstatat(3, "", [pid 5832] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5832] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] unlink("./15/binderfs" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./15/binderfs", ./strace-static-x86_64: Process 5919 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./15/binderfs" [pid 5831] <... close resumed>) = 0 [pid 5919] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5919 [pid 5832] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5919] chdir("./16" [pid 5829] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5920 attached [pid 5919] <... chdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5920 [pid 5920] set_robust_list(0x555557df1660, 24 [pid 5919] <... prctl resumed>) = 0 [pid 5920] <... set_robust_list resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5829] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5920] chdir("./16" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5919] setpgid(0, 0 [pid 5918] <... sync resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./15/file1", [pid 5920] <... chdir resumed>) = 0 [pid 5919] <... setpgid resumed>) = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5920] <... prctl resumed>) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] exit_group(0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5920] setpgid(0, 0 [pid 5918] <... exit_group resumed>) = ? [pid 5829] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5920] <... setpgid resumed>) = 0 [pid 5918] +++ exited with 0 +++ [pid 5832] newfstatat(AT_FDCWD, "./15/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5919] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 5829] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5919] write(3, "1000", 4 [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... openat resumed>) = 4 [pid 5919] <... write resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5920] <... openat resumed>) = 3 [pid 5919] close(3 [pid 5832] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5920] write(3, "1000", 4 [pid 5919] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5829] getdents64(4, [pid 5920] <... write resumed>) = 4 [pid 5919] symlink("/dev/binderfs", "./binderfs" [pid 5832] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5920] close(3 [pid 5919] <... symlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] getdents64(4, executing program [pid 5920] <... close resumed>) = 0 [pid 5919] write(1, "executing program\n", 18 [pid 5832] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs" [pid 5829] close(4) = 0 [pid 5829] rmdir("./15/file1" [pid 5920] <... symlink resumed>) = 0 [pid 5830] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5920] write(1, "executing program\n", 18 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5920] <... write resumed>) = 18 [pid 5919] <... write resumed>) = 18 [pid 5832] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... rmdir resumed>) = 0 [pid 5919] memfd_create("syzkaller", 0 [pid 5830] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(3, [pid 5920] memfd_create("syzkaller", 0 [pid 5919] <... memfd_create resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] close(4 [pid 5830] newfstatat(3, "", [pid 5829] close(3 [pid 5920] <... memfd_create resumed>) = 3 [pid 5919] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] rmdir("./15/file1" [pid 5830] getdents64(3, [pid 5829] rmdir("./15" [pid 5920] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... rmdir resumed>) = 0 [pid 5919] <... write resumed>) = 524288 [pid 5832] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] mkdir("./16", 0777 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] unlink("./15/binderfs" [pid 5829] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5920] <... write resumed>) = 524288 [pid 5919] munmap(0x7fd6d9800000, 138412032 [pid 5832] rmdir("./15" [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5920] munmap(0x7fd6d9800000, 138412032 [pid 5919] <... munmap resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5920] <... munmap resumed>) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... ioctl resumed>) = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5919] <... openat resumed>) = 4 [pid 5829] close(3 [pid 5920] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5832] mkdir("./16", 0777) = 0 [pid 5920] <... ioctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... umount2 resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5920] close(3 [pid 5919] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 5921 attached [pid 5920] <... close resumed>) = 0 [pid 5919] close(3 [pid 5832] close(3 [pid 5830] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5921 [pid 5921] set_robust_list(0x555557df1660, 24) = 0 [pid 5920] close(4 [pid 5919] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5921] chdir("./16" [pid 5920] <... close resumed>) = 0 [pid 5919] close(4) = 0 [pid 5920] mkdir("./file1", 0777 [pid 5919] mkdir("./file1", 0777 [pid 5920] <... mkdir resumed>) = 0 [pid 5921] <... chdir resumed>) = 0 [pid 5919] <... mkdir resumed>) = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5920] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5919] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5921] <... openat resumed>) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(AT_FDCWD, "./15/file1", ./strace-static-x86_64: Process 5922 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5922] set_robust_list(0x555557df1660, 24 [pid 5921] <... symlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... set_robust_list resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5922 [pid 5830] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 5921] write(1, "executing program\n", 18 [pid 5830] <... openat resumed>) = 4 [ 64.582984][ T5920] loop2: detected capacity change from 0 to 1024 [ 64.589602][ T5919] loop4: detected capacity change from 0 to 1024 [pid 5922] chdir("./16" [pid 5921] <... write resumed>) = 18 [pid 5830] newfstatat(4, "", [pid 5922] <... chdir resumed>) = 0 [pid 5921] memfd_create("syzkaller", 0 [pid 5920] <... mount resumed>) = 0 [pid 5919] <... mount resumed>) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5922] <... prctl resumed>) = 0 [pid 5830] getdents64(4, [pid 5922] setpgid(0, 0 [pid 5921] <... memfd_create resumed>) = 3 [pid 5920] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5919] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5922] <... setpgid resumed>) = 0 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5920] <... openat resumed>) = 3 [pid 5919] <... openat resumed>) = 3 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] <... mmap resumed>) = 0x7fd6d9800000 [pid 5920] chdir("./file1" [pid 5830] getdents64(4, [pid 5922] <... openat resumed>) = 3 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5920] <... chdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5922] write(3, "1000", 4 [pid 5919] chdir("./file1" [pid 5830] close(4 [pid 5922] <... write resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 5922] close(3 [pid 5830] rmdir("./15/file1" [pid 5922] <... close resumed>) = 0 [pid 5919] <... chdir resumed>) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5922] symlink("/dev/binderfs", "./binderfs" [pid 5919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... rmdir resumed>) = 0 [pid 5919] chdir("./file0" [pid 5922] <... symlink resumed>) = 0 executing program [pid 5922] write(1, "executing program\n", 18 [pid 5830] getdents64(3, [pid 5922] <... write resumed>) = 18 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5922] memfd_create("syzkaller", 0 [pid 5921] <... write resumed>) = 524288 [pid 5920] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5919] <... chdir resumed>) = 0 [pid 5830] close(3 [pid 5922] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5921] munmap(0x7fd6d9800000, 138412032 [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5919] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] rmdir("./15" [pid 5922] <... mmap resumed>) = 0x7fd6d9800000 [pid 5921] <... munmap resumed>) = 0 [pid 5920] chdir("./file0" [pid 5919] <... openat resumed>) = 4 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5920] <... chdir resumed>) = 0 [pid 5919] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... rmdir resumed>) = 0 [pid 5921] <... openat resumed>) = 4 [pid 5920] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5921] ioctl(4, LOOP_SET_FD, 3 [pid 5920] <... openat resumed>) = 4 [pid 5830] mkdir("./16", 0777) = 0 [pid 5922] <... write resumed>) = 524288 [pid 5921] <... ioctl resumed>) = 0 [pid 5920] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5919] <... creat resumed>) = 5 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5922] munmap(0x7fd6d9800000, 138412032 [pid 5921] close(3 [pid 5830] <... openat resumed>) = 3 [pid 5922] <... munmap resumed>) = 0 [pid 5919] sync( [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5921] <... close resumed>) = 0 [pid 5921] close(4 [pid 5830] <... ioctl resumed>) = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5921] <... close resumed>) = 0 [pid 5830] close(3 [pid 5921] mkdir("./file1", 0777 [pid 5920] <... creat resumed>) = 5 [pid 5922] <... openat resumed>) = 4 [pid 5921] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5921] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5920] sync( [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557df1650) = 5923 ./strace-static-x86_64: Process 5923 attached [pid 5923] set_robust_list(0x555557df1660, 24) = 0 [pid 5923] chdir("./16") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5922] <... ioctl resumed>) = 0 [pid 5921] <... mount resumed>) = 0 [pid 5921] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5923] write(1, "executing program\n", 18 [pid 5921] <... openat resumed>) = 3 executing program [pid 5923] <... write resumed>) = 18 [pid 5922] close(3 [pid 5921] chdir("./file1" [pid 5923] memfd_create("syzkaller", 0 [pid 5922] <... close resumed>) = 0 [pid 5919] <... sync resumed>) = 0 [pid 5921] <... chdir resumed>) = 0 [pid 5920] <... sync resumed>) = 0 [pid 5923] <... memfd_create resumed>) = 3 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5920] exit_group(0 [pid 5919] exit_group(0 [pid 5922] close(4 [pid 5921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5920] <... exit_group resumed>) = ? [pid 5919] <... exit_group resumed>) = ? [pid 5921] chdir("./file0" [pid 5922] <... close resumed>) = 0 [pid 5922] mkdir("./file1", 0777) = 0 [pid 5922] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5920] +++ exited with 0 +++ [pid 5919] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5921] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 3 [pid 5921] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5833] newfstatat(3, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5833] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5921] <... openat resumed>) = 4 [pid 5833] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5921] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5922] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5922] <... openat resumed>) = 3 [pid 5833] unlink("./16/binderfs" [pid 5831] unlink("./16/binderfs" [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5922] chdir("./file1" [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5922] <... chdir resumed>) = 0 [ 64.698273][ T5921] loop0: detected capacity change from 0 to 1024 [ 64.719225][ T5922] loop3: detected capacity change from 0 to 1024 [pid 5831] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5922] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5922] chdir("./file0" [pid 5921] <... creat resumed>) = 5 [pid 5923] <... write resumed>) = 524288 [pid 5921] sync( [pid 5923] munmap(0x7fd6d9800000, 138412032 [pid 5922] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5923] <... munmap resumed>) = 0 [pid 5922] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5922] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(AT_FDCWD, "./16/file1", [pid 5831] newfstatat(AT_FDCWD, "./16/file1", [pid 5923] <... openat resumed>) = 4 [pid 5923] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5922] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5922] sync( [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5923] <... ioctl resumed>) = 0 [pid 5922] <... sync resumed>) = 0 [pid 5921] <... sync resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] getdents64(4, [pid 5921] exit_group(0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5923] close(3 [pid 5831] rmdir("./16/file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5923] <... close resumed>) = 0 [pid 5922] exit_group(0 [pid 5921] <... exit_group resumed>) = ? [pid 5833] close(4 [pid 5923] close(4 [pid 5922] <... exit_group resumed>) = ? [pid 5833] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5923] <... close resumed>) = 0 [pid 5922] +++ exited with 0 +++ [pid 5921] +++ exited with 0 +++ [pid 5833] rmdir("./16/file1" [pid 5831] getdents64(3, [pid 5923] mkdir("./file1", 0777 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] getdents64(3, [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5923] <... mkdir resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5923] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... close resumed>) = 0 [pid 5831] close(3 [pid 5833] rmdir("./16" [pid 5831] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] rmdir("./16" [pid 5832] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] mkdir("./17", 0777 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... mkdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] mkdir("./17", 0777 [pid 5829] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 5829] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5923] <... mount resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5832] unlink("./16/binderfs" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5923] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [ 64.799699][ T5923] loop1: detected capacity change from 0 to 1024 [pid 5829] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./16/binderfs") = 0 [pid 5829] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5923] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5924 attached [pid 5923] chdir("./file1" [pid 5831] <... ioctl resumed>) = 0 [pid 5829] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5923] <... chdir resumed>) = 0 [pid 5831] close(3 [pid 5924] set_robust_list(0x555557df1660, 24 [pid 5923] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5923] chdir("./file0" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5924] <... set_robust_list resumed>) = 0 [pid 5923] <... chdir resumed>) = 0 [pid 5924] chdir("./17" [pid 5923] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(AT_FDCWD, "./16/file1", [pid 5831] <... close resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./16/file1", [pid 5924] <... chdir resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5925 attached [pid 5924] setpgid(0, 0 [pid 5829] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5925] set_robust_list(0x555557df1660, 24 [pid 5924] <... setpgid resumed>) = 0 [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5925] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5924 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5925] chdir("./17" [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5923] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5925 [pid 5829] <... openat resumed>) = 4 [pid 5925] <... chdir resumed>) = 0 [pid 5924] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] write(3, "1000", 4 [pid 5923] <... creat resumed>) = 5 [pid 5832] newfstatat(4, "", [pid 5925] <... prctl resumed>) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5924] <... write resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5924] close(3) = 0 [pid 5832] getdents64(4, [pid 5829] getdents64(4, [pid 5924] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5924] <... symlink resumed>) = 0 [pid 5924] write(1, "executing program\n", 18 [pid 5832] getdents64(4, [pid 5829] getdents64(4, executing program [pid 5923] sync( [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5925] <... openat resumed>) = 3 [pid 5924] <... write resumed>) = 18 [pid 5832] close(4 [pid 5829] close(4) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] rmdir("./16/file1" [pid 5832] rmdir("./16/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 5925] write(3, "1000", 4 [pid 5924] memfd_create("syzkaller", 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5925] <... write resumed>) = 4 [pid 5924] <... memfd_create resumed>) = 3 [pid 5925] close(3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5925] <... close resumed>) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs" [pid 5924] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(3, executing program [pid 5925] <... symlink resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5832] close(3 [pid 5829] close(3 [pid 5925] memfd_create("syzkaller", 0 [pid 5832] <... close resumed>) = 0 [pid 5925] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./16" [pid 5829] <... close resumed>) = 0 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] rmdir("./16" [pid 5925] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] mkdir("./17", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5829] mkdir("./17", 0777 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5923] <... sync resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 3 [pid 5923] exit_group(0 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5923] <... exit_group resumed>) = ? [pid 5832] close(3 [pid 5829] <... ioctl resumed>) = 0 [pid 5923] +++ exited with 0 +++ [pid 5832] <... close resumed>) = 0 [pid 5829] close(3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5926 attached [pid 5830] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5926] set_robust_list(0x555557df1660, 24 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached [pid 5926] <... set_robust_list resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5926 [pid 5830] unlink("./16/binderfs" [pid 5927] set_robust_list(0x555557df1660, 24 [pid 5926] chdir("./17" [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... unlink resumed>) = 0 [pid 5926] <... chdir resumed>) = 0 [pid 5830] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... umount2 resumed>) = 0 [pid 5926] <... prctl resumed>) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5926] write(3, "1000", 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... set_robust_list resumed>) = 0 [pid 5926] <... write resumed>) = 4 [pid 5830] newfstatat(AT_FDCWD, "./16/file1", [pid 5927] chdir("./17" [pid 5926] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5927 [pid 5926] <... close resumed>) = 0 [pid 5830] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5926] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5926] <... symlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 executing program [pid 5926] write(1, "executing program\n", 18 [pid 5830] newfstatat(4, "", [pid 5926] <... write resumed>) = 18 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5927] <... chdir resumed>) = 0 [pid 5926] memfd_create("syzkaller", 0 [pid 5830] getdents64(4, [pid 5926] <... memfd_create resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5924] <... write resumed>) = 524288 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] getdents64(4, [pid 5926] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5927] <... prctl resumed>) = 0 [pid 5925] <... write resumed>) = 524288 [pid 5830] close(4 [pid 5927] setpgid(0, 0 [pid 5925] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... close resumed>) = 0 [pid 5927] <... setpgid resumed>) = 0 [pid 5830] rmdir("./16/file1" [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5925] <... munmap resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5924] munmap(0x7fd6d9800000, 138412032 [pid 5927] <... openat resumed>) = 3 [pid 5924] <... munmap resumed>) = 0 [pid 5927] write(3, "1000", 4 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5927] <... write resumed>) = 4 [pid 5924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5927] close(3) = 0 [pid 5924] <... openat resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs" [pid 5925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5830] rmdir("./16" [pid 5927] <... symlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./17", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 executing program [pid 5925] <... openat resumed>) = 4 [pid 5927] write(1, "executing program\n", 18) = 18 [pid 5925] ioctl(4, LOOP_SET_FD, 3 [pid 5926] <... write resumed>) = 524288 [pid 5926] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5830] <... close resumed>) = 0 [pid 5927] memfd_create("syzkaller", 0 [pid 5926] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5924] <... ioctl resumed>) = 0 [pid 5925] <... ioctl resumed>) = 0 [ 64.972475][ T5924] loop4: detected capacity change from 0 to 1024 [ 64.990797][ T5925] loop2: detected capacity change from 0 to 1024 [pid 5925] close(3) = 0 [pid 5927] <... memfd_create resumed>) = 3 [pid 5926] <... openat resumed>) = 4 [pid 5924] close(3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5925] close(4 [pid 5924] <... close resumed>) = 0 [pid 5925] <... close resumed>) = 0 [pid 5927] <... mmap resumed>) = 0x7fd6d9800000 [pid 5924] close(4 [pid 5928] set_robust_list(0x555557df1660, 24 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5925] mkdir("./file1", 0777 [pid 5924] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5928 [pid 5925] <... mkdir resumed>) = 0 [pid 5924] mkdir("./file1", 0777 [pid 5928] <... set_robust_list resumed>) = 0 [pid 5925] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5928] chdir("./17" [pid 5924] <... mkdir resumed>) = 0 [pid 5924] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5928] <... chdir resumed>) = 0 [pid 5926] <... ioctl resumed>) = 0 [pid 5925] <... mount resumed>) = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5925] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5928] <... prctl resumed>) = 0 [pid 5926] close(3 [pid 5925] <... openat resumed>) = 3 [pid 5928] setpgid(0, 0 [pid 5926] <... close resumed>) = 0 [pid 5925] chdir("./file1" [pid 5928] <... setpgid resumed>) = 0 [pid 5926] close(4 [pid 5925] <... chdir resumed>) = 0 [pid 5926] <... close resumed>) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5926] mkdir("./file1", 0777 [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5924] <... mount resumed>) = 0 [pid 5924] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5928] <... openat resumed>) = 3 [pid 5924] <... openat resumed>) = 3 [pid 5928] write(3, "1000", 4 [pid 5927] <... write resumed>) = 524288 [pid 5926] <... mkdir resumed>) = 0 [pid 5925] chdir("./file0" [pid 5924] chdir("./file1") = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5925] <... chdir resumed>) = 0 [pid 5924] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5925] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5924] chdir("./file0" [pid 5927] munmap(0x7fd6d9800000, 138412032 [pid 5928] <... write resumed>) = 4 [pid 5926] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5925] <... openat resumed>) = 4 [pid 5924] <... chdir resumed>) = 0 [ 65.019704][ T5926] loop3: detected capacity change from 0 to 1024 [pid 5928] close(3 [pid 5927] <... munmap resumed>) = 0 [pid 5925] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5924] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 executing program [pid 5928] <... close resumed>) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5927] <... openat resumed>) = 4 [pid 5928] <... symlink resumed>) = 0 [pid 5928] write(1, "executing program\n", 18 [pid 5927] ioctl(4, LOOP_SET_FD, 3 [pid 5925] <... creat resumed>) = 5 [pid 5928] <... write resumed>) = 18 [pid 5924] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5928] memfd_create("syzkaller", 0 [pid 5925] sync( [pid 5928] <... memfd_create resumed>) = 3 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5924] <... creat resumed>) = 5 [pid 5927] <... ioctl resumed>) = 0 [pid 5924] sync( [pid 5927] close(3 [pid 5926] <... mount resumed>) = 0 [pid 5927] <... close resumed>) = 0 [pid 5927] close(4 [pid 5926] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] <... close resumed>) = 0 [pid 5926] chdir("./file1" [pid 5928] <... write resumed>) = 524288 [pid 5927] mkdir("./file1", 0777 [pid 5926] <... chdir resumed>) = 0 [pid 5928] munmap(0x7fd6d9800000, 138412032 [pid 5926] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5926] chdir("./file0") = 0 [pid 5928] <... munmap resumed>) = 0 [pid 5926] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5926] <... openat resumed>) = 4 [pid 5928] <... openat resumed>) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3 [pid 5926] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5928] <... ioctl resumed>) = 0 [pid 5927] <... mkdir resumed>) = 0 [pid 5926] <... creat resumed>) = 5 [pid 5927] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5926] sync( [pid 5928] close(3 [pid 5925] <... sync resumed>) = 0 [pid 5928] <... close resumed>) = 0 [pid 5928] close(4 [pid 5925] exit_group(0 [pid 5928] <... close resumed>) = 0 [pid 5925] <... exit_group resumed>) = ? [pid 5928] mkdir("./file1", 0777 [pid 5927] <... mount resumed>) = 0 [pid 5925] +++ exited with 0 +++ [pid 5924] <... sync resumed>) = 0 [ 65.085375][ T5927] loop0: detected capacity change from 0 to 1024 [ 65.121419][ T5928] loop1: detected capacity change from 0 to 1024 [pid 5926] <... sync resumed>) = 0 [pid 5928] <... mkdir resumed>) = 0 [pid 5927] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5926] exit_group(0 [pid 5924] exit_group(0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5927] <... openat resumed>) = 3 [pid 5926] <... exit_group resumed>) = ? [pid 5924] <... exit_group resumed>) = ? [pid 5927] chdir("./file1" [pid 5928] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5927] <... chdir resumed>) = 0 [pid 5926] +++ exited with 0 +++ [pid 5924] +++ exited with 0 +++ [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5927] chdir("./file0" [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5927] <... chdir resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5927] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5927] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5927] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5928] <... mount resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5928] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] getdents64(3, [pid 5831] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5928] <... openat resumed>) = 3 [pid 5927] <... creat resumed>) = 5 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5927] sync( [pid 5833] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] chdir("./file1" [pid 5832] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./17/binderfs" [pid 5928] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5832] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] chdir("./file0" [pid 5833] unlink("./17/binderfs" [pid 5832] newfstatat(3, "", [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] <... umount2 resumed>) = 0 [pid 5928] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5928] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5928] <... openat resumed>) = 4 [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./17/binderfs" [pid 5927] <... sync resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./17/file1", [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5927] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... exit_group resumed>) = ? [pid 5833] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./17/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5831] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(4, "", [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5927] +++ exited with 0 +++ [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5928] <... creat resumed>) = 5 [pid 5833] rmdir("./17/file1" [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5928] sync( [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5833] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./17/file1" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5833] close(3 [pid 5832] newfstatat(AT_FDCWD, "./17/file1", [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] close(3) = 0 [pid 5928] <... sync resumed>) = 0 [pid 5833] rmdir("./17" [pid 5832] newfstatat(4, "", [pid 5829] <... restart_syscall resumed>) = 0 [pid 5928] exit_group(0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./17" [pid 5928] <... exit_group resumed>) = ? [pid 5832] getdents64(4, [pid 5831] <... rmdir resumed>) = 0 [pid 5928] +++ exited with 0 +++ [pid 5833] mkdir("./18", 0777 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... mkdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] mkdir("./18", 0777 [pid 5829] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5832] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] rmdir("./17/file1" [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... close resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... ioctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5832] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./17/binderfs" [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5832] rmdir("./17") = 0 [pid 5832] mkdir("./18", 0777) = 0 [pid 5829] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 5830] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5929 attached [pid 5830] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(3, "", executing program [pid 5929] set_robust_list(0x555557df1660, 24 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] <... set_robust_list resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] newfstatat(AT_FDCWD, "./17/file1", [pid 5929] chdir("./18" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5929 [pid 5929] <... chdir resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5930 [pid 5830] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... prctl resumed>) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached [pid 5929] <... openat resumed>) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5931 [pid 5931] set_robust_list(0x555557df1660, 24) = 0 [pid 5931] chdir("./18" [pid 5929] write(1, "executing program\n", 18 [pid 5931] <... chdir resumed>) = 0 [pid 5929] <... write resumed>) = 18 [pid 5929] memfd_create("syzkaller", 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5929] <... memfd_create resumed>) = 3 [pid 5931] <... prctl resumed>) = 0 [pid 5931] setpgid(0, 0 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5931] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5930 attached [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] set_robust_list(0x555557df1660, 24 [pid 5830] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5829] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5931] <... openat resumed>) = 3 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5931] write(3, "1000", 4 [pid 5830] unlink("./17/binderfs" [pid 5829] newfstatat(4, "", [pid 5930] chdir("./18" [pid 5931] <... write resumed>) = 4 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5930] <... chdir resumed>) = 0 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5930] setpgid(0, 0 [pid 5931] write(1, "executing program\n", 18 [pid 5930] <... setpgid resumed>) = 0 executing program [pid 5829] getdents64(4, [pid 5931] <... write resumed>) = 18 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5931] memfd_create("syzkaller", 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] close(4 [pid 5931] <... memfd_create resumed>) = 3 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5930] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5930] write(3, "1000", 4 [pid 5829] rmdir("./17/file1" [pid 5930] <... write resumed>) = 4 [pid 5930] close(3 [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... rmdir resumed>) = 0 [pid 5930] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 5930] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 executing program [pid 5930] <... symlink resumed>) = 0 [pid 5829] close(3 [pid 5930] write(1, "executing program\n", 18) = 18 [pid 5829] <... close resumed>) = 0 [pid 5930] memfd_create("syzkaller", 0 [pid 5829] rmdir("./17" [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] mkdir("./18", 0777 [pid 5930] <... memfd_create resumed>) = 3 [pid 5830] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... mkdir resumed>) = 0 [pid 5930] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5929] <... write resumed>) = 524288 [pid 5830] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... ioctl resumed>) = 0 [pid 5929] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5829] close(3 [pid 5929] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... openat resumed>) = 4 [pid 5931] <... write resumed>) = 524288 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] newfstatat(4, "", [pid 5829] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 5931] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5931] <... munmap resumed>) = 0 [pid 5830] close(4 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5931] <... openat resumed>) = 4 [pid 5830] rmdir("./17/file1" [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5930] <... write resumed>) = 524288 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5929] <... ioctl resumed>) = 0 [pid 5929] close(3) = 0 [pid 5929] close(4./strace-static-x86_64: Process 5932 attached ) = 0 [pid 5830] getdents64(3, [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5932 [pid 5929] mkdir("./file1", 0777) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5929] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5932] set_robust_list(0x555557df1660, 24) = 0 [pid 5932] chdir("./18") = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0 [pid 5830] close(3) = 0 [pid 5932] <... setpgid resumed>) = 0 [pid 5830] rmdir("./17" [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... rmdir resumed>) = 0 [pid 5932] <... openat resumed>) = 3 [pid 5930] munmap(0x7fd6d9800000, 138412032 [pid 5929] <... mount resumed>) = 0 [pid 5830] mkdir("./18", 0777 [pid 5931] <... ioctl resumed>) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5929] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... mkdir resumed>) = 0 [pid 5932] write(3, "1000", 4 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5932] <... write resumed>) = 4 [pid 5930] <... openat resumed>) = 4 [ 65.314890][ T5929] loop4: detected capacity change from 0 to 1024 [ 65.328653][ T5931] loop3: detected capacity change from 0 to 1024 [pid 5932] close(3executing program [pid 5830] <... openat resumed>) = 3 [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5932] <... close resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5932] symlink("/dev/binderfs", "./binderfs" [pid 5929] <... openat resumed>) = 3 [pid 5932] <... symlink resumed>) = 0 [pid 5931] close(3 [pid 5929] chdir("./file1" [pid 5830] <... ioctl resumed>) = 0 [pid 5932] write(1, "executing program\n", 18) = 18 [pid 5931] <... close resumed>) = 0 [pid 5929] <... chdir resumed>) = 0 [pid 5932] memfd_create("syzkaller", 0 [pid 5931] close(4 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5932] <... memfd_create resumed>) = 3 [pid 5931] <... close resumed>) = 0 [pid 5929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5931] mkdir("./file1", 0777 [pid 5929] chdir("./file0" [pid 5932] <... mmap resumed>) = 0x7fd6d9800000 [pid 5931] <... mkdir resumed>) = 0 [pid 5830] close(3 [pid 5931] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5929] <... chdir resumed>) = 0 [pid 5929] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5929] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... close resumed>) = 0 [pid 5929] <... creat resumed>) = 5 [pid 5931] <... mount resumed>) = 0 [pid 5930] <... ioctl resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached [pid 5931] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5930] close(3 [pid 5931] <... openat resumed>) = 3 [pid 5930] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5933 [pid 5933] set_robust_list(0x555557df1660, 24 [pid 5931] chdir("./file1" [pid 5929] sync( [pid 5933] <... set_robust_list resumed>) = 0 [pid 5931] <... chdir resumed>) = 0 [pid 5930] close(4 [pid 5933] chdir("./18" [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5930] <... close resumed>) = 0 [pid 5933] <... chdir resumed>) = 0 [pid 5932] <... write resumed>) = 524288 [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5930] mkdir("./file1", 0777 [pid 5931] chdir("./file0" [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] <... mkdir resumed>) = 0 [pid 5933] setpgid(0, 0 [pid 5931] <... chdir resumed>) = 0 [pid 5930] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5932] munmap(0x7fd6d9800000, 138412032 [pid 5931] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5933] <... setpgid resumed>) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] <... munmap resumed>) = 0 [pid 5933] <... openat resumed>) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5931] <... openat resumed>) = 4 [pid 5933] close(3 [pid 5932] <... openat resumed>) = 4 [pid 5930] <... mount resumed>) = 0 [pid 5933] <... close resumed>) = 0 [ 65.364268][ T5930] loop2: detected capacity change from 0 to 1024 [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5930] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5933] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5931] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5930] <... openat resumed>) = 3 [pid 5933] write(1, "executing program\n", 18 [pid 5930] chdir("./file1" [pid 5933] <... write resumed>) = 18 [pid 5930] <... chdir resumed>) = 0 [pid 5933] memfd_create("syzkaller", 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5933] <... memfd_create resumed>) = 3 [pid 5930] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5931] <... creat resumed>) = 5 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5930] chdir("./file0" [pid 5929] <... sync resumed>) = 0 [pid 5931] sync( [pid 5933] <... mmap resumed>) = 0x7fd6d9800000 [pid 5930] <... chdir resumed>) = 0 [pid 5929] exit_group(0 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file1", 0777 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5932] <... mkdir resumed>) = 0 [pid 5932] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5930] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5929] <... exit_group resumed>) = ? [pid 5929] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5932] <... mount resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file1" [pid 5931] <... sync resumed>) = 0 [pid 5930] <... openat resumed>) = 4 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5930] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5932] <... chdir resumed>) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5932] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5932] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5931] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5932] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5931] <... exit_group resumed>) = ? [pid 5833] getdents64(3, [pid 5933] <... write resumed>) = 524288 [pid 5931] +++ exited with 0 +++ [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5933] munmap(0x7fd6d9800000, 138412032 [pid 5932] <... openat resumed>) = 4 [pid 5833] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5930] <... creat resumed>) = 5 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.418569][ T5932] loop0: detected capacity change from 0 to 1024 [pid 5833] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5933] <... munmap resumed>) = 0 [pid 5930] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5932] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5933] <... openat resumed>) = 4 [pid 5833] unlink("./18/binderfs" [pid 5933] ioctl(4, LOOP_SET_FD, 3 [pid 5932] <... creat resumed>) = 5 [pid 5932] sync( [pid 5832] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5933] <... ioctl resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5933] close(3 [pid 5833] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5933] <... close resumed>) = 0 [pid 5933] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] <... close resumed>) = 0 [pid 5930] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] unlink("./18/binderfs" [pid 5933] mkdir("./file1", 0777 [pid 5932] <... sync resumed>) = 0 [pid 5930] exit_group(0 [pid 5833] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5933] <... mkdir resumed>) = 0 [pid 5930] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... unlink resumed>) = 0 [pid 5932] exit_group(0 [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./18/file1", [pid 5933] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5932] <... exit_group resumed>) = ? [pid 5930] +++ exited with 0 +++ [pid 5932] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5833] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [pid 5933] <... mount resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5933] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] getdents64(4, [pid 5933] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] chdir("./file1" [pid 5833] getdents64(4, [pid 5832] newfstatat(AT_FDCWD, "./18/file1", [pid 5831] <... restart_syscall resumed>) = 0 [pid 5933] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] close(4 [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... close resumed>) = 0 [pid 5831] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... restart_syscall resumed>) = 0 [pid 5933] chdir("./file0" [pid 5833] rmdir("./18/file1" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5833] getdents64(3, [pid 5831] newfstatat(3, "", [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] rmdir("./18" [pid 5829] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(4, [pid 5831] getdents64(3, [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... openat resumed>) = 3 [pid 5832] close(4 [pid 5831] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5933] <... chdir resumed>) = 0 [pid 5833] mkdir("./19", 0777 [pid 5832] rmdir("./18/file1" [pid 5831] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5829] newfstatat(3, "", [pid 5933] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] unlink("./18/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5933] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] getdents64(3, [pid 5831] <... unlink resumed>) = 0 [pid 5933] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [ 65.485056][ T5933] loop1: detected capacity change from 0 to 1024 [pid 5831] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] close(3 [pid 5933] <... creat resumed>) = 5 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5933] sync( [pid 5833] close(3 [pid 5832] rmdir("./18" [pid 5833] <... close resumed>) = 0 [pid 5831] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] mkdir("./19", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5831] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] unlink("./18/binderfs" [pid 5831] getdents64(4, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached , child_tidptr=0x555557df1650) = 5934 [pid 5934] set_robust_list(0x555557df1660, 24 [pid 5933] <... sync resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... unlink resumed>) = 0 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5933] exit_group(0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] getdents64(4, [pid 5933] <... exit_group resumed>) = ? [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5831] close(4 [pid 5934] chdir("./19" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... close resumed>) = 0 [pid 5933] +++ exited with 0 +++ [pid 5831] rmdir("./18/file1" [pid 5934] <... chdir resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5934] <... prctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5829] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] setpgid(0, 0 [pid 5831] getdents64(3, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5934] <... setpgid resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5934] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5830] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] write(3, "1000", 4 [pid 5831] <... close resumed>) = 0 [pid 5934] <... write resumed>) = 4 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] rmdir("./18" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5935 attached [pid 5934] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5934] <... close resumed>) = 0 [pid 5831] mkdir("./19", 0777 [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] <... symlink resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5935] set_robust_list(0x555557df1660, 24 [pid 5934] write(1, "executing program\n", 18 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5935 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 4 [pid 5935] <... set_robust_list resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 5830] newfstatat(3, "", executing program [pid 5935] chdir("./19" [pid 5934] <... write resumed>) = 18 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5935] <... chdir resumed>) = 0 [pid 5934] memfd_create("syzkaller", 0 [pid 5830] getdents64(3, [pid 5829] getdents64(4, [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] <... memfd_create resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5829] close(4 [pid 5935] <... prctl resumed>) = 0 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 5935] setpgid(0, 0 [pid 5934] <... mmap resumed>) = 0x7fd6d9800000 [pid 5935] <... setpgid resumed>) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... close resumed>) = 0 [pid 5830] unlink("./18/binderfs" [pid 5829] rmdir("./18/file1" [pid 5935] <... openat resumed>) = 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached [pid 5935] write(3, "1000", 4 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5936] set_robust_list(0x555557df1660, 24 executing program [pid 5935] <... write resumed>) = 4 [pid 5830] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5936] <... set_robust_list resumed>) = 0 [pid 5935] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5936 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5935] <... close resumed>) = 0 [pid 5829] close(3 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5829] <... close resumed>) = 0 [pid 5936] chdir("./19" [pid 5829] rmdir("./18" [pid 5936] <... chdir resumed>) = 0 [pid 5935] write(1, "executing program\n", 18 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5935] <... write resumed>) = 18 [pid 5936] <... prctl resumed>) = 0 [pid 5935] memfd_create("syzkaller", 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5936] setpgid(0, 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] mkdir("./19", 0777 [pid 5935] <... memfd_create resumed>) = 3 [pid 5936] <... setpgid resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5830] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5935] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] newfstatat(AT_FDCWD, "./18/file1", [pid 5936] <... openat resumed>) = 3 [pid 5934] <... write resumed>) = 524288 [pid 5829] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(3 [pid 5830] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] <... close resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5934] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5934] <... munmap resumed>) = 0 [pid 5830] getdents64(4, [pid 5936] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs" [pid 5830] close(4) = 0 [pid 5936] <... symlink resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] rmdir("./18/file1" [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] <... openat resumed>) = 4 [pid 5936] write(1, "executing program\n", 18 [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... rmdir resumed>) = 0 executing program [pid 5936] <... write resumed>) = 18 [pid 5830] getdents64(3, [pid 5936] memfd_create("syzkaller", 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5936] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] rmdir("./18" [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5936] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5937 ./strace-static-x86_64: Process 5937 attached [pid 5830] mkdir("./19", 0777 [pid 5937] set_robust_list(0x555557df1660, 24 [pid 5935] <... write resumed>) = 524288 [pid 5937] <... set_robust_list resumed>) = 0 [pid 5937] chdir("./19") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5935] munmap(0x7fd6d9800000, 138412032 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5935] <... munmap resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5937] <... openat resumed>) = 3 [pid 5935] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5937] write(3, "1000", 4 [pid 5935] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 3 [pid 5937] <... write resumed>) = 4 [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5937] close(3 [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5934] <... ioctl resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5937] <... close resumed>) = 0 [pid 5935] <... ioctl resumed>) = 0 [pid 5934] close(3 [pid 5830] close(3 [pid 5937] symlink("/dev/binderfs", "./binderfs" [pid 5935] close(3 [pid 5934] <... close resumed>) = 0 [pid 5935] <... close resumed>) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file1", 0777) = 0 [pid 5934] close(4 [pid 5935] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5937] <... symlink resumed>) = 0 [pid 5936] <... write resumed>) = 524288 [pid 5934] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 executing program [pid 5937] write(1, "executing program\n", 18 [pid 5934] mkdir("./file1", 0777 [pid 5937] <... write resumed>) = 18 [pid 5936] munmap(0x7fd6d9800000, 138412032 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached [pid 5937] memfd_create("syzkaller", 0 [pid 5936] <... munmap resumed>) = 0 [pid 5934] <... mkdir resumed>) = 0 [pid 5938] set_robust_list(0x555557df1660, 24 [pid 5937] <... memfd_create resumed>) = 3 [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5934] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5938] <... set_robust_list resumed>) = 0 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5936] <... openat resumed>) = 4 [pid 5938] chdir("./19" [pid 5937] <... mmap resumed>) = 0x7fd6d9800000 [pid 5936] ioctl(4, LOOP_SET_FD, 3 [pid 5935] <... mount resumed>) = 0 [ 65.668334][ T5934] loop4: detected capacity change from 0 to 1024 [ 65.690129][ T5935] loop3: detected capacity change from 0 to 1024 [pid 5938] <... chdir resumed>) = 0 [pid 5935] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5938 [pid 5938] <... setpgid resumed>) = 0 [pid 5935] <... openat resumed>) = 3 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] chdir("./file1") = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] chdir("./file0") = 0 [pid 5935] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5935] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5938] write(3, "1000", 4 [pid 5935] <... creat resumed>) = 5 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5935] sync( [pid 5938] <... write resumed>) = 4 [pid 5938] close(3 [pid 5934] <... mount resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5934] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5938] symlink("/dev/binderfs", "./binderfs" [pid 5934] <... openat resumed>) = 3 [pid 5938] <... symlink resumed>) = 0 executing program [pid 5936] <... ioctl resumed>) = 0 [pid 5934] chdir("./file1" [pid 5938] write(1, "executing program\n", 18 [pid 5937] <... write resumed>) = 524288 [pid 5936] close(3 [pid 5934] <... chdir resumed>) = 0 [pid 5938] <... write resumed>) = 18 [pid 5937] munmap(0x7fd6d9800000, 138412032 [pid 5934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5938] memfd_create("syzkaller", 0 [pid 5936] <... close resumed>) = 0 [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5938] <... memfd_create resumed>) = 3 [pid 5936] close(4 [pid 5934] chdir("./file0" [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5936] <... close resumed>) = 0 [pid 5938] <... mmap resumed>) = 0x7fd6d9800000 [pid 5937] <... munmap resumed>) = 0 [pid 5936] mkdir("./file1", 0777 [pid 5934] <... chdir resumed>) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5936] <... mkdir resumed>) = 0 [pid 5935] <... sync resumed>) = 0 [pid 5934] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5937] <... openat resumed>) = 4 [pid 5935] exit_group(0 [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5934] <... openat resumed>) = 4 [pid 5935] <... exit_group resumed>) = ? [pid 5936] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5935] +++ exited with 0 +++ [pid 5936] <... mount resumed>) = 0 [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5937] <... ioctl resumed>) = 0 [pid 5934] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5936] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5936] <... openat resumed>) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5936] chdir("./file1" [pid 5934] <... creat resumed>) = 5 [pid 5936] <... chdir resumed>) = 0 [pid 5934] sync( [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5937] close(3 [pid 5936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] chdir("./file0" [pid 5832] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5937] <... close resumed>) = 0 [pid 5937] close(4 [pid 5832] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5938] <... write resumed>) = 524288 [pid 5937] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5937] mkdir("./file1", 0777 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5937] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5937] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5938] munmap(0x7fd6d9800000, 138412032 [pid 5936] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./19/binderfs" [pid 5936] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... unlink resumed>) = 0 [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 65.720558][ T5936] loop2: detected capacity change from 0 to 1024 [ 65.760309][ T5937] loop0: detected capacity change from 0 to 1024 [pid 5936] <... openat resumed>) = 4 [pid 5938] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5936] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5938] ioctl(4, LOOP_SET_FD, 3 [pid 5832] rmdir("./19/file1") = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5938] <... ioctl resumed>) = 0 [pid 5937] <... mount resumed>) = 0 [pid 5832] close(3 [pid 5938] close(3 [pid 5937] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5936] <... creat resumed>) = 5 [pid 5938] <... close resumed>) = 0 [pid 5937] <... openat resumed>) = 3 [pid 5936] sync( [pid 5938] close(4 [pid 5937] chdir("./file1" [pid 5934] <... sync resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5938] <... close resumed>) = 0 [pid 5937] <... chdir resumed>) = 0 [pid 5934] exit_group(0 [pid 5938] mkdir("./file1", 0777 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5934] <... exit_group resumed>) = ? [pid 5937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] rmdir("./19" [pid 5938] <... mkdir resumed>) = 0 [pid 5937] chdir("./file0") = 0 [pid 5934] +++ exited with 0 +++ [pid 5832] <... rmdir resumed>) = 0 [pid 5937] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5938] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5937] <... openat resumed>) = 4 [pid 5937] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] mkdir("./20", 0777 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5937] <... creat resumed>) = 5 [pid 5832] <... ioctl resumed>) = 0 [pid 5833] getdents64(3, [pid 5937] sync( [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] close(3 [pid 5833] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./19/binderfs") = 0 [pid 5833] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5937] <... sync resumed>) = 0 [pid 5936] <... sync resumed>) = 0 [pid 5938] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5937] exit_group(0 [pid 5936] exit_group(0 [pid 5937] <... exit_group resumed>) = ? [pid 5936] <... exit_group resumed>) = ? [pid 5938] <... openat resumed>) = 3 [pid 5938] chdir("./file1") = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 65.817984][ T5938] loop1: detected capacity change from 0 to 1024 [pid 5936] +++ exited with 0 +++ [pid 5937] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- ./strace-static-x86_64: Process 5939 attached [pid 5938] chdir("./file0" [pid 5833] newfstatat(AT_FDCWD, "./19/file1", [pid 5831] <... restart_syscall resumed>) = 0 [pid 5939] set_robust_list(0x555557df1660, 24) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5939 [pid 5833] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] chdir("./20" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5938] <... chdir resumed>) = 0 [pid 5831] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5938] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... openat resumed>) = 4 [pid 5939] <... prctl resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] setpgid(0, 0 [pid 5938] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(4, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5939] <... setpgid resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5829] newfstatat(3, "", [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5938] <... creat resumed>) = 5 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5939] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5939] write(3, "1000", 4 [pid 5938] sync( [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5829] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... write resumed>) = 4 [pid 5833] close(4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] close(3 [pid 5833] <... close resumed>) = 0 [pid 5831] unlink("./19/binderfs" [pid 5829] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5939] <... close resumed>) = 0 [pid 5833] rmdir("./19/file1" [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs"executing program [pid 5831] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./19/binderfs" [pid 5939] <... symlink resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5939] write(1, "executing program\n", 18 [pid 5833] getdents64(3, [pid 5939] <... write resumed>) = 18 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5939] memfd_create("syzkaller", 0 [pid 5833] <... close resumed>) = 0 [pid 5939] <... memfd_create resumed>) = 3 [pid 5833] rmdir("./19" [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5939] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = 0 [pid 5833] mkdir("./20", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5938] <... sync resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] close(3 [pid 5938] exit_group(0 [pid 5833] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5829] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] <... exit_group resumed>) = ? [pid 5831] newfstatat(4, "", [pid 5938] +++ exited with 0 +++ [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] getdents64(4, [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./19/file1") = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached [pid 5831] close(3) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] set_robust_list(0x555557df1660, 24 [pid 5831] rmdir("./19" [pid 5940] <... set_robust_list resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5940] chdir("./20" [pid 5939] <... write resumed>) = 524288 [pid 5829] newfstatat(AT_FDCWD, "./19/file1", [pid 5940] <... chdir resumed>) = 0 [pid 5939] munmap(0x7fd6d9800000, 138412032 [pid 5831] mkdir("./20", 0777 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5940 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] <... munmap resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 4 [pid 5940] <... prctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(4, "", [pid 5940] setpgid(0, 0 [pid 5939] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5940] <... setpgid resumed>) = 0 [pid 5939] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./19/file1" [pid 5940] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./19") = 0 [pid 5829] mkdir("./20", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 5940] write(3, "1000", 4 [pid 5939] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5830] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 5940] <... write resumed>) = 4 [pid 5939] close(3 [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] close(3 [pid 5830] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5940] <... close resumed>) = 0 [pid 5939] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs" [pid 5939] close(4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] unlink("./19/binderfs" [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5941 attached [pid 5940] <... symlink resumed>) = 0 [pid 5939] <... close resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 executing program [pid 5940] write(1, "executing program\n", 18 [pid 5939] mkdir("./file1", 0777 [pid 5830] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5942 attached [pid 5940] <... write resumed>) = 18 [pid 5939] <... mkdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5941] set_robust_list(0x555557df1660, 24 [pid 5940] memfd_create("syzkaller", 0 [pid 5830] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5941] <... set_robust_list resumed>) = 0 [pid 5940] <... memfd_create resumed>) = 3 [pid 5939] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5941 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] set_robust_list(0x555557df1660, 24 [pid 5941] chdir("./20" [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5942 [pid 5942] <... set_robust_list resumed>) = 0 [pid 5940] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] newfstatat(AT_FDCWD, "./19/file1", [pid 5942] chdir("./20" [pid 5941] <... chdir resumed>) = 0 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5942] <... chdir resumed>) = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5939] <... mount resumed>) = 0 [pid 5830] getdents64(4, [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5941] <... prctl resumed>) = 0 [pid 5939] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5942] <... prctl resumed>) = 0 [pid 5941] setpgid(0, 0 [pid 5939] <... openat resumed>) = 3 [pid 5830] getdents64(4, [pid 5942] setpgid(0, 0 [pid 5941] <... setpgid resumed>) = 0 [pid 5939] chdir("./file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5942] <... setpgid resumed>) = 0 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5939] <... chdir resumed>) = 0 [pid 5830] close(4 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5941] <... openat resumed>) = 3 [pid 5939] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5942] <... openat resumed>) = 3 [pid 5941] write(3, "1000", 4 [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5942] write(3, "1000", 4 [pid 5941] <... write resumed>) = 4 executing program executing program [pid 5942] <... write resumed>) = 4 [pid 5941] close(3 [pid 5942] close(3 [pid 5941] <... close resumed>) = 0 [pid 5942] <... close resumed>) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5939] chdir("./file0" [pid 5942] <... symlink resumed>) = 0 [pid 5941] <... symlink resumed>) = 0 [pid 5830] rmdir("./19/file1" [pid 5942] write(1, "executing program\n", 18 [pid 5941] write(1, "executing program\n", 18 [pid 5942] <... write resumed>) = 18 [pid 5941] <... write resumed>) = 18 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] memfd_create("syzkaller", 0 [pid 5939] <... chdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, [pid 5942] <... memfd_create resumed>) = 3 [pid 5941] <... memfd_create resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] close(3 [pid 5942] <... mmap resumed>) = 0x7fd6d9800000 [pid 5941] <... mmap resumed>) = 0x7fd6d9800000 [pid 5939] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./19" [pid 5940] <... write resumed>) = 524288 [pid 5830] <... rmdir resumed>) = 0 [pid 5939] <... openat resumed>) = 4 [pid 5939] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5940] munmap(0x7fd6d9800000, 138412032 [ 65.973095][ T5939] loop3: detected capacity change from 0 to 1024 [pid 5830] mkdir("./20", 0777 [pid 5940] <... munmap resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5939] <... creat resumed>) = 5 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5940] <... openat resumed>) = 4 [pid 5939] sync( [pid 5830] <... openat resumed>) = 3 [pid 5940] ioctl(4, LOOP_SET_FD, 3 [pid 5942] <... write resumed>) = 524288 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5941] <... write resumed>) = 524288 [pid 5830] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5942] munmap(0x7fd6d9800000, 138412032 [pid 5941] munmap(0x7fd6d9800000, 138412032) = 0 ./strace-static-x86_64: Process 5943 attached [pid 5942] <... munmap resumed>) = 0 [pid 5940] <... ioctl resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5943 [pid 5941] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5940] close(3 [pid 5941] <... openat resumed>) = 4 [pid 5940] <... close resumed>) = 0 [pid 5940] close(4) = 0 [pid 5941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] mkdir("./file1", 0777) = 0 [pid 5940] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5943] set_robust_list(0x555557df1660, 24 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5943] <... set_robust_list resumed>) = 0 [pid 5942] <... openat resumed>) = 4 [ 66.052417][ T5940] loop4: detected capacity change from 0 to 1024 [ 66.083779][ T5941] loop2: detected capacity change from 0 to 1024 [pid 5941] close(3 [pid 5943] chdir("./20" [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5940] <... mount resumed>) = 0 [pid 5941] <... close resumed>) = 0 [pid 5941] close(4 [pid 5943] <... chdir resumed>) = 0 [pid 5940] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5939] <... sync resumed>) = 0 [pid 5943] <... prctl resumed>) = 0 [pid 5940] <... openat resumed>) = 3 [pid 5939] exit_group(0 [pid 5943] setpgid(0, 0 [pid 5940] chdir("./file1" [pid 5939] <... exit_group resumed>) = ? [pid 5943] <... setpgid resumed>) = 0 [pid 5940] <... chdir resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5940] chdir("./file0" [pid 5939] +++ exited with 0 +++ [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5942] <... ioctl resumed>) = 0 [pid 5940] <... chdir resumed>) = 0 [pid 5942] close(3 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5942] <... close resumed>) = 0 [pid 5940] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5943] <... openat resumed>) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5943] write(3, "1000", 4 [pid 5942] close(4 [pid 5943] <... write resumed>) = 4 [pid 5943] close(3 [pid 5942] <... close resumed>) = 0 [pid 5943] <... close resumed>) = 0 [pid 5942] mkdir("./file1", 0777 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5940] <... openat resumed>) = 4 [pid 5832] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5943] write(1, "executing program\n", 18 executing program [pid 5942] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5941] <... close resumed>) = 0 [pid 5940] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... write resumed>) = 18 [pid 5941] mkdir("./file1", 0777 [pid 5832] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5943] memfd_create("syzkaller", 0 [pid 5941] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5943] <... memfd_create resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5943] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(3, [pid 5941] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5940] <... creat resumed>) = 5 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5942] <... mount resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5940] sync( [pid 5832] unlink("./20/binderfs" [pid 5942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5832] <... unlink resumed>) = 0 [pid 5942] chdir("./file1" [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5942] <... chdir resumed>) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5942] chdir("./file0") = 0 [pid 5942] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5943] <... write resumed>) = 524288 [pid 5942] <... openat resumed>) = 4 [ 66.112153][ T5942] loop0: detected capacity change from 0 to 1024 [pid 5941] <... mount resumed>) = 0 [pid 5942] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... umount2 resumed>) = 0 [pid 5941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5941] chdir("./file1" [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5941] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] newfstatat(AT_FDCWD, "./20/file1", [pid 5941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5941] chdir("./file0" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./20/file1" [pid 5942] <... creat resumed>) = 5 [pid 5943] munmap(0x7fd6d9800000, 138412032 [pid 5942] sync( [pid 5941] <... chdir resumed>) = 0 [pid 5943] <... munmap resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./20" [pid 5943] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5941] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5943] <... openat resumed>) = 4 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5941] <... openat resumed>) = 4 [pid 5940] <... sync resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./21", 0777 [pid 5942] <... sync resumed>) = 0 [pid 5940] exit_group(0 [pid 5942] exit_group(0 [pid 5940] <... exit_group resumed>) = ? [pid 5832] <... mkdir resumed>) = 0 [pid 5942] <... exit_group resumed>) = ? [pid 5942] +++ exited with 0 +++ [pid 5941] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5940] +++ exited with 0 +++ [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] <... openat resumed>) = 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... ioctl resumed>) = 0 [pid 5941] <... creat resumed>) = 5 [pid 5832] close(3 [pid 5941] sync( [pid 5943] <... ioctl resumed>) = 0 [pid 5941] <... sync resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5941] exit_group(0 [pid 5943] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached [pid 5943] <... close resumed>) = 0 [pid 5941] <... exit_group resumed>) = ? [pid 5829] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5943] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5943] <... close resumed>) = 0 [pid 5833] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5944] set_robust_list(0x555557df1660, 24 [pid 5943] mkdir("./file1", 0777 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5944 [pid 5829] <... openat resumed>) = 3 [pid 5943] <... mkdir resumed>) = 0 [pid 5941] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5829] getdents64(3, [pid 5944] chdir("./21" [pid 5943] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... openat resumed>) = 3 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./20/binderfs") = 0 [pid 5829] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5944] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] unlink("./20/binderfs" [pid 5831] <... openat resumed>) = 3 [pid 5829] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(AT_FDCWD, "./20/file1", [pid 5944] write(3, "1000", 4 [pid 5943] <... mount resumed>) = 0 [ 66.197952][ T5943] loop1: detected capacity change from 0 to 1024 [pid 5831] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5944] <... write resumed>) = 4 [pid 5943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] close(3 [pid 5831] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5944] <... close resumed>) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs" [pid 5943] <... openat resumed>) = 3 [pid 5833] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5944] <... symlink resumed>) = 0 [pid 5943] chdir("./file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./20/binderfs" [pid 5829] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5944] write(1, "executing program\n", 18 [pid 5943] <... chdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./20/file1", [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5944] <... write resumed>) = 18 [pid 5943] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(4, "", [pid 5944] memfd_create("syzkaller", 0 [pid 5943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5944] <... memfd_create resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5943] chdir("./file0" [pid 5833] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5944] <... mmap resumed>) = 0x7fd6d9800000 [pid 5943] <... chdir resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5943] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = 0 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5943] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5943] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./20/file1", [pid 5833] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5833] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5833] close(4 [pid 5829] rmdir("./20/file1" [pid 5833] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5833] rmdir("./20/file1" [pid 5831] newfstatat(4, "", [pid 5943] <... creat resumed>) = 5 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5831] getdents64(4, [pid 5944] <... write resumed>) = 524288 [pid 5943] sync( [pid 5833] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5944] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./20" [pid 5833] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5944] <... munmap resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] close(4 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] rmdir("./20" [pid 5831] <... close resumed>) = 0 [pid 5829] mkdir("./21", 0777 [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] rmdir("./20/file1" [pid 5944] <... openat resumed>) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] mkdir("./21", 0777 [pid 5831] getdents64(3, [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5944] <... ioctl resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5944] close(3 [pid 5831] rmdir("./20" [pid 5944] <... close resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5944] close(4) = 0 [pid 5943] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 5943] exit_group(0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5944] mkdir("./file1", 0777 [pid 5833] <... ioctl resumed>) = 0 [pid 5944] <... mkdir resumed>) = 0 [pid 5943] <... exit_group resumed>) = ? [pid 5833] close(3 [pid 5829] <... close resumed>) = 0 [pid 5944] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5943] +++ exited with 0 +++ [pid 5833] <... close resumed>) = 0 [pid 5831] mkdir("./21", 0777 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5944] <... mount resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5945 attached ./strace-static-x86_64: Process 5946 attached [pid 5944] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... openat resumed>) = 3 [pid 5944] <... openat resumed>) = 3 [pid 5944] chdir("./file1" [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5944] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5946 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5945 [pid 5945] set_robust_list(0x555557df1660, 24) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] newfstatat(3, "", [pid 5945] chdir("./21" [pid 5944] chdir("./file0" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5945] <... chdir resumed>) = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0 [pid 5946] set_robust_list(0x555557df1660, 24 [pid 5945] <... setpgid resumed>) = 0 [pid 5944] <... chdir resumed>) = 0 [pid 5830] getdents64(3, [pid 5946] <... set_robust_list resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached [pid 5946] chdir("./21" [pid 5944] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5946] <... chdir resumed>) = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5944] <... openat resumed>) = 4 [pid 5830] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5946] <... prctl resumed>) = 0 [pid 5946] setpgid(0, 0 [pid 5945] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5946] <... setpgid resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5947 [ 66.306527][ T5944] loop3: detected capacity change from 0 to 1024 [pid 5830] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5947] set_robust_list(0x555557df1660, 24 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5945] write(3, "1000", 4 [pid 5944] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... set_robust_list resumed>) = 0 [pid 5830] unlink("./20/binderfs" [pid 5945] <... write resumed>) = 4 [pid 5947] chdir("./21" [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs" [pid 5947] <... chdir resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5945] <... symlink resumed>) = 0 [pid 5830] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] <... prctl resumed>) = 0 [pid 5946] <... openat resumed>) = 3 [pid 5945] write(1, "executing program\n", 18 [pid 5947] setpgid(0, 0 [pid 5944] <... creat resumed>) = 5 [pid 5830] <... umount2 resumed>) = 0 executing program [pid 5945] <... write resumed>) = 18 [pid 5945] memfd_create("syzkaller", 0 [pid 5947] <... setpgid resumed>) = 0 [pid 5946] write(3, "1000", 4 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5946] <... write resumed>) = 4 [pid 5945] <... memfd_create resumed>) = 3 [pid 5944] sync( [pid 5946] close(3 [pid 5947] <... openat resumed>) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] write(3, "1000", 4 [pid 5946] <... close resumed>) = 0 [pid 5945] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5946] symlink("/dev/binderfs", "./binderfs" [pid 5947] <... write resumed>) = 4 [pid 5830] newfstatat(AT_FDCWD, "./20/file1", [pid 5947] close(3 [pid 5946] <... symlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... close resumed>) = 0 [pid 5830] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] symlink("/dev/binderfs", "./binderfs"executing program [pid 5946] write(1, "executing program\n", 18 [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] <... symlink resumed>) = 0 [pid 5946] <... write resumed>) = 18 [pid 5944] <... sync resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5946] memfd_create("syzkaller", 0 [pid 5830] <... openat resumed>) = 4 [pid 5944] exit_group(0 [pid 5946] <... memfd_create resumed>) = 3 [pid 5944] <... exit_group resumed>) = ? [pid 5830] newfstatat(4, "", [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5947] write(1, "executing program\n", 18executing program ) = 18 [pid 5946] <... mmap resumed>) = 0x7fd6d9800000 [pid 5945] <... write resumed>) = 524288 [pid 5944] +++ exited with 0 +++ [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5947] memfd_create("syzkaller", 0 [pid 5945] munmap(0x7fd6d9800000, 138412032 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5947] <... memfd_create resumed>) = 3 [pid 5945] <... munmap resumed>) = 0 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5945] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5945] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", [pid 5945] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5945] <... ioctl resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(4, [pid 5945] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5945] <... close resumed>) = 0 [pid 5832] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(4 [pid 5945] close(4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5830] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] rmdir("./20/file1" [pid 5945] mkdir("./file1", 0777 [pid 5832] unlink("./21/binderfs" [pid 5945] <... mkdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5945] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5947] <... write resumed>) = 524288 [pid 5946] <... write resumed>) = 524288 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./20" [pid 5946] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... rmdir resumed>) = 0 [pid 5947] munmap(0x7fd6d9800000, 138412032 [pid 5946] <... munmap resumed>) = 0 [pid 5947] <... munmap resumed>) = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5946] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] mkdir("./21", 0777 [pid 5946] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] ioctl(4, LOOP_SET_FD, 3 [pid 5946] ioctl(4, LOOP_SET_FD, 3 [pid 5832] newfstatat(AT_FDCWD, "./21/file1", [pid 5830] <... mkdir resumed>) = 0 [pid 5947] <... ioctl resumed>) = 0 [pid 5947] close(3) = 0 [pid 5946] <... ioctl resumed>) = 0 [pid 5945] <... mount resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5947] close(4) = 0 [pid 5946] close(3 [pid 5945] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5945] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5945] chdir("./file1" [pid 5832] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5946] <... close resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5945] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5946] close(4 [pid 5945] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... ioctl resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5946] <... close resumed>) = 0 [pid 5945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] close(3 [pid 5946] mkdir("./file1", 0777 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5947] mkdir("./file1", 0777) = 0 [pid 5947] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5946] <... mkdir resumed>) = 0 [pid 5945] chdir("./file0" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5946] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(4, ./strace-static-x86_64: Process 5948 attached 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5948] set_robust_list(0x555557df1660, 24 [pid 5832] close(4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5948 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5947] <... mount resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5948] chdir("./21" [pid 5945] <... chdir resumed>) = 0 [pid 5832] rmdir("./21/file1" [pid 5948] <... chdir resumed>) = 0 [pid 5947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5947] <... openat resumed>) = 3 [pid 5948] <... prctl resumed>) = 0 [pid 5947] chdir("./file1" [pid 5832] <... rmdir resumed>) = 0 [pid 5948] setpgid(0, 0 [pid 5947] <... chdir resumed>) = 0 [pid 5945] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] getdents64(3, [pid 5948] <... setpgid resumed>) = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 66.439515][ T5945] loop0: detected capacity change from 0 to 1024 [ 66.467632][ T5947] loop2: detected capacity change from 0 to 1024 [ 66.468548][ T5946] loop4: detected capacity change from 0 to 1024 [pid 5832] close(3executing program [pid 5947] chdir("./file0" [pid 5832] <... close resumed>) = 0 [pid 5948] <... openat resumed>) = 3 [pid 5946] <... mount resumed>) = 0 [pid 5945] <... openat resumed>) = 4 [pid 5832] rmdir("./21" [pid 5945] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5948] write(3, "1000", 4 [pid 5946] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5948] <... write resumed>) = 4 [pid 5948] close(3) = 0 [pid 5946] chdir("./file1" [pid 5948] symlink("/dev/binderfs", "./binderfs" [pid 5946] <... chdir resumed>) = 0 [pid 5948] <... symlink resumed>) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5948] write(1, "executing program\n", 18 [pid 5946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] <... write resumed>) = 18 [pid 5948] memfd_create("syzkaller", 0 [pid 5946] chdir("./file0" [pid 5948] <... memfd_create resumed>) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5947] <... chdir resumed>) = 0 [pid 5946] <... chdir resumed>) = 0 [pid 5945] <... creat resumed>) = 5 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./22", 0777 [pid 5946] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... mkdir resumed>) = 0 [pid 5947] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5946] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5947] <... openat resumed>) = 4 [pid 5946] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5945] sync( [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5947] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] close(3 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5946] <... creat resumed>) = 5 [pid 5832] <... close resumed>) = 0 [pid 5947] <... creat resumed>) = 5 [pid 5948] <... write resumed>) = 524288 [pid 5947] sync( [pid 5946] sync( [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5945] <... sync resumed>) = 0 ./strace-static-x86_64: Process 5949 attached [pid 5945] exit_group(0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5949 [pid 5945] <... exit_group resumed>) = ? [pid 5949] set_robust_list(0x555557df1660, 24 [pid 5945] +++ exited with 0 +++ [pid 5949] <... set_robust_list resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5949] chdir("./22") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5948] munmap(0x7fd6d9800000, 138412032 [pid 5949] <... prctl resumed>) = 0 [pid 5947] <... sync resumed>) = 0 [pid 5946] <... sync resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5949] setpgid(0, 0 [pid 5947] exit_group(0 [pid 5946] exit_group(0 [pid 5949] <... setpgid resumed>) = 0 [pid 5948] <... munmap resumed>) = 0 [pid 5947] <... exit_group resumed>) = ? [pid 5946] <... exit_group resumed>) = ? [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5949] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5949] write(3, "1000", 4 [pid 5948] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5947] +++ exited with 0 +++ [pid 5946] +++ exited with 0 +++ [pid 5829] <... openat resumed>) = 3 [pid 5949] <... write resumed>) = 4 [pid 5948] <... openat resumed>) = 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] newfstatat(3, "", [pid 5949] close(3 [pid 5948] ioctl(4, LOOP_SET_FD, 3 [pid 5949] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs" [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./21/binderfs") = 0 [pid 5829] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5949] <... symlink resumed>) = 0 [pid 5948] <... ioctl resumed>) = 0 [pid 5831] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 executing program [pid 5949] write(1, "executing program\n", 18 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] <... write resumed>) = 18 [pid 5833] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5949] memfd_create("syzkaller", 0 [pid 5948] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] <... memfd_create resumed>) = 3 [pid 5948] <... close resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5948] close(4) = 0 [pid 5948] mkdir("./file1", 0777) = 0 [pid 5948] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(3, "", [pid 5829] newfstatat(AT_FDCWD, "./21/file1", [pid 5949] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5829] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5831] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./21/file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] <... write resumed>) = 524288 [pid 5833] unlink("./21/binderfs" [pid 5831] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5829] <... rmdir resumed>) = 0 [pid 5949] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 66.616420][ T5948] loop1: detected capacity change from 0 to 1024 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5948] <... mount resumed>) = 0 [pid 5833] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./21/binderfs" [pid 5829] close(3 [pid 5949] <... openat resumed>) = 4 [pid 5948] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5949] ioctl(4, LOOP_SET_FD, 3 [pid 5948] <... openat resumed>) = 3 [pid 5831] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] rmdir("./21" [pid 5949] <... ioctl resumed>) = 0 [pid 5948] chdir("./file1" [pid 5833] <... umount2 resumed>) = 0 [pid 5831] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... rmdir resumed>) = 0 [pid 5949] close(3 [pid 5948] <... chdir resumed>) = 0 [pid 5833] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5948] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5949] <... close resumed>) = 0 [pid 5948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] mkdir("./22", 0777 [pid 5949] close(4 [pid 5948] chdir("./file0" [pid 5833] newfstatat(AT_FDCWD, "./21/file1", [pid 5831] newfstatat(AT_FDCWD, "./21/file1", [pid 5949] <... close resumed>) = 0 [pid 5948] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5949] mkdir("./file1", 0777 [pid 5948] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5949] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5949] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5948] <... openat resumed>) = 4 [pid 5833] getdents64(4, [pid 5948] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... openat resumed>) = 4 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5829] close(3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5948] <... creat resumed>) = 5 [pid 5833] close(4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5948] sync( [pid 5833] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 5833] rmdir("./21/file1") = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5833] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./21/file1" [pid 5833] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./21" [pid 5831] getdents64(3, [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./21" [pid 5833] mkdir("./22", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] mkdir("./22", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5950 attached [pid 5949] <... mount resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5950 [pid 5950] set_robust_list(0x555557df1660, 24) = 0 [pid 5950] chdir("./22" [pid 5831] <... openat resumed>) = 3 [pid 5949] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... ioctl resumed>) = 0 [pid 5949] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5950] <... chdir resumed>) = 0 [ 66.682119][ T5949] loop3: detected capacity change from 0 to 1024 [pid 5949] chdir("./file1" [pid 5948] <... sync resumed>) = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5949] <... chdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5948] exit_group(0 [pid 5831] close(3 [pid 5950] <... prctl resumed>) = 0 [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5948] <... exit_group resumed>) = ? [pid 5831] <... close resumed>) = 0 [pid 5950] setpgid(0, 0 [pid 5949] chdir("./file0" [pid 5948] +++ exited with 0 +++ [pid 5950] <... setpgid resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... close resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5950] <... openat resumed>) = 3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5950] write(3, "1000", 4./strace-static-x86_64: Process 5951 attached ) = 4 [pid 5951] set_robust_list(0x555557df1660, 24 [pid 5950] close(3 [pid 5949] <... chdir resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5950] <... close resumed>) = 0 [pid 5951] <... set_robust_list resumed>) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs"executing program [pid 5951] chdir("./22" [pid 5949] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5950] <... symlink resumed>) = 0 [pid 5951] <... chdir resumed>) = 0 [pid 5950] write(1, "executing program\n", 18 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] <... write resumed>) = 18 [pid 5951] <... prctl resumed>) = 0 [pid 5951] setpgid(0, 0 [pid 5950] memfd_create("syzkaller", 0 [pid 5949] <... openat resumed>) = 4 [pid 5830] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5951] <... setpgid resumed>) = 0 [pid 5950] <... memfd_create resumed>) = 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(3, "", ./strace-static-x86_64: Process 5952 attached [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5949] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5951 [pid 5952] set_robust_list(0x555557df1660, 24 [pid 5951] <... openat resumed>) = 3 [pid 5950] <... mmap resumed>) = 0x7fd6d9800000 [pid 5949] <... creat resumed>) = 5 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5949] sync( [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5952 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./21/binderfs") = 0 [pid 5830] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5952] <... set_robust_list resumed>) = 0 [pid 5951] write(3, "1000", 4) = 4 [pid 5952] chdir("./22") = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5951] close(3 [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5952] <... prctl resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5951] symlink("/dev/binderfs", "./binderfs" [pid 5952] setpgid(0, 0) = 0 executing program [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5951] <... symlink resumed>) = 0 [pid 5952] <... openat resumed>) = 3 [pid 5951] write(1, "executing program\n", 18 [pid 5952] write(3, "1000", 4 [pid 5951] <... write resumed>) = 18 [pid 5952] <... write resumed>) = 4 [pid 5952] close(3 [pid 5951] memfd_create("syzkaller", 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5952] <... close resumed>) = 0 [pid 5951] <... memfd_create resumed>) = 3 [pid 5952] symlink("/dev/binderfs", "./binderfs" [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 5952] <... symlink resumed>) = 0 [pid 5951] <... mmap resumed>) = 0x7fd6d9800000 [pid 5949] <... sync resumed>) = 0 [pid 5830] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5952] write(1, "executing program\n", 18) = 18 [pid 5949] exit_group(0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] memfd_create("syzkaller", 0 [pid 5949] <... exit_group resumed>) = ? [pid 5830] newfstatat(AT_FDCWD, "./21/file1", [pid 5949] +++ exited with 0 +++ [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 5952] <... memfd_create resumed>) = 3 [pid 5950] <... write resumed>) = 524288 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5950] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5950] <... munmap resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./21/file1") = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5832] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] close(3 [pid 5832] getdents64(3, [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./21" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] mkdir("./22", 0777 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5950] <... openat resumed>) = 4 [pid 5832] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5832] unlink("./22/binderfs") = 0 [pid 5951] <... write resumed>) = 524288 [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5952] <... write resumed>) = 524288 [pid 5951] munmap(0x7fd6d9800000, 138412032 [pid 5950] <... ioctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5951] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./22/file1", [pid 5952] munmap(0x7fd6d9800000, 138412032 [pid 5951] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5950] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5952] <... munmap resumed>) = 0 [pid 5951] <... openat resumed>) = 4 [pid 5950] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5951] ioctl(4, LOOP_SET_FD, 3 [pid 5950] close(4 [pid 5832] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./22/file1" [pid 5830] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5952] <... openat resumed>) = 4 [pid 5950] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5951] <... ioctl resumed>) = 0 [pid 5950] mkdir("./file1", 0777 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5953 attached [pid 5953] set_robust_list(0x555557df1660, 24 [pid 5832] close(3 [pid 5953] <... set_robust_list resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5953] chdir("./22" [pid 5832] rmdir("./22") = 0 [pid 5953] <... chdir resumed>) = 0 [pid 5951] close(3 [pid 5950] <... mkdir resumed>) = 0 [pid 5832] mkdir("./23", 0777 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5953 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... mkdir resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5950] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5953] <... prctl resumed>) = 0 [pid 5953] setpgid(0, 0 [pid 5951] close(4 [pid 5953] <... setpgid resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5952] <... ioctl resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5952] close(3 [pid 5951] mkdir("./file1", 0777 [pid 5952] <... close resumed>) = 0 [pid 5951] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5951] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5953] <... openat resumed>) = 3 [pid 5952] close(4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5953] write(3, "1000", 4 [pid 5952] <... close resumed>) = 0 [pid 5950] <... mount resumed>) = 0 [pid 5953] <... write resumed>) = 4 [pid 5952] mkdir("./file1", 0777 [pid 5951] <... mount resumed>) = 0 [pid 5950] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... ioctl resumed>) = 0 [pid 5953] close(3 [pid 5952] <... mkdir resumed>) = 0 [pid 5951] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5950] <... openat resumed>) = 3 [pid 5832] close(3 [pid 5953] <... close resumed>) = 0 [pid 5952] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5951] <... openat resumed>) = 3 [pid 5953] symlink("/dev/binderfs", "./binderfs" [pid 5951] chdir("./file1" [pid 5950] chdir("./file1" [pid 5951] <... chdir resumed>) = 0 [pid 5950] <... chdir resumed>) = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... close resumed>) = 0 [pid 5951] chdir("./file0" [pid 5953] <... symlink resumed>) = 0 [pid 5950] chdir("./file0"executing program [pid 5953] write(1, "executing program\n", 18 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5953] <... write resumed>) = 18 [pid 5953] memfd_create("syzkaller", 0) = 3 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5951] <... chdir resumed>) = 0 [pid 5953] <... mmap resumed>) = 0x7fd6d9800000 [pid 5952] <... mount resumed>) = 0 [pid 5950] <... chdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5954 ./strace-static-x86_64: Process 5954 attached [pid 5951] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5950] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5952] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 66.823036][ T5950] loop0: detected capacity change from 0 to 1024 [ 66.842134][ T5951] loop4: detected capacity change from 0 to 1024 [ 66.859118][ T5952] loop2: detected capacity change from 0 to 1024 [pid 5951] <... openat resumed>) = 4 [pid 5954] set_robust_list(0x555557df1660, 24 [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5952] chdir("./file1" [pid 5950] <... openat resumed>) = 4 [pid 5954] <... set_robust_list resumed>) = 0 [pid 5954] chdir("./23") = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5954] setpgid(0, 0 [pid 5953] <... write resumed>) = 524288 [pid 5954] <... setpgid resumed>) = 0 [pid 5952] <... chdir resumed>) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5953] munmap(0x7fd6d9800000, 138412032 [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... munmap resumed>) = 0 [pid 5954] <... openat resumed>) = 3 [pid 5953] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5950] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5954] write(3, "1000", 4 [pid 5953] <... openat resumed>) = 4 [pid 5952] chdir("./file0" [pid 5954] <... write resumed>) = 4 [pid 5953] ioctl(4, LOOP_SET_FD, 3 [pid 5952] <... chdir resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5951] <... creat resumed>) = 5 [pid 5951] sync( [pid 5952] <... openat resumed>) = 4 [pid 5954] close(3 [pid 5950] <... creat resumed>) = 5 [pid 5954] <... close resumed>) = 0 [pid 5950] sync( [pid 5954] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5953] <... ioctl resumed>) = 0 [pid 5952] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5954] write(1, "executing program\n", 18 [pid 5953] close(3 [pid 5954] <... write resumed>) = 18 [pid 5953] <... close resumed>) = 0 [pid 5954] memfd_create("syzkaller", 0 [pid 5952] <... creat resumed>) = 5 [pid 5954] <... memfd_create resumed>) = 3 [pid 5953] close(4 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5953] <... close resumed>) = 0 [pid 5952] sync( [pid 5954] <... mmap resumed>) = 0x7fd6d9800000 [pid 5953] mkdir("./file1", 0777 [pid 5951] <... sync resumed>) = 0 [pid 5950] <... sync resumed>) = 0 [ 66.938317][ T5953] loop1: detected capacity change from 0 to 1024 [pid 5951] exit_group(0 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5953] <... mkdir resumed>) = 0 [pid 5952] <... sync resumed>) = 0 [pid 5951] <... exit_group resumed>) = ? [pid 5950] exit_group(0 [pid 5952] exit_group(0) = ? [pid 5950] <... exit_group resumed>) = ? [pid 5952] +++ exited with 0 +++ [pid 5950] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5953] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5951] +++ exited with 0 +++ [pid 5829] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5833] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5954] <... write resumed>) = 524288 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5954] munmap(0x7fd6d9800000, 138412032 [pid 5833] newfstatat(3, "", [pid 5829] getdents64(3, [pid 5954] <... munmap resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5831] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5829] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5954] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5953] <... mount resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] unlink("./22/binderfs" [pid 5953] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] getdents64(3, [pid 5829] <... unlink resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5953] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5953] chdir("./file1" [pid 5833] unlink("./22/binderfs" [pid 5831] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 5954] close(3 [pid 5953] <... chdir resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] <... close resumed>) = 0 [pid 5953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] close(4 [pid 5953] chdir("./file0" [pid 5833] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./22/file1", [pid 5954] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] mkdir("./file1", 0777 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] <... mkdir resumed>) = 0 [pid 5953] <... chdir resumed>) = 0 [pid 5831] unlink("./22/binderfs" [pid 5829] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5954] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5831] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5953] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] newfstatat(4, "", [pid 5953] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 5953] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] close(4 [pid 5833] newfstatat(AT_FDCWD, "./22/file1", [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5953] <... creat resumed>) = 5 [pid 5833] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./22/file1" [pid 5954] <... mount resumed>) = 0 [pid 5953] sync( [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5954] <... openat resumed>) = 3 [pid 5954] chdir("./file1") = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] <... openat resumed>) = 4 [pid 5954] chdir("./file0" [pid 5833] newfstatat(4, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5954] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(AT_FDCWD, "./22/file1", [pid 5833] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 67.017903][ T5954] loop3: detected capacity change from 0 to 1024 [pid 5831] newfstatat(4, "", [pid 5954] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5953] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5829] close(3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./22" [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./22/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5954] <... openat resumed>) = 4 [pid 5953] exit_group(0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5954] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5953] <... exit_group resumed>) = ? [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(3, [pid 5829] mkdir("./23", 0777 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5833] close(3) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5953] +++ exited with 0 +++ [pid 5833] rmdir("./22" [pid 5831] close(4 [pid 5954] <... creat resumed>) = 5 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... openat resumed>) = 3 [pid 5833] mkdir("./23", 0777 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5954] sync( [pid 5831] rmdir("./22/file1" [pid 5833] <... mkdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(3) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] close(3 [pid 5830] newfstatat(3, "", [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./22" [pid 5830] getdents64(3, [pid 5954] <... sync resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5954] exit_group(0 [pid 5830] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached [pid 5954] <... exit_group resumed>) = ? [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] +++ exited with 0 +++ [pid 5831] mkdir("./23", 0777 [pid 5830] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./22/binderfs"./strace-static-x86_64: Process 5956 attached [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... unlink resumed>) = 0 [pid 5956] set_robust_list(0x555557df1660, 24 [pid 5955] set_robust_list(0x555557df1660, 24 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5956] <... set_robust_list resumed>) = 0 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5955 [pid 5956] chdir("./23" [pid 5955] chdir("./23" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5956 [pid 5831] <... openat resumed>) = 3 [pid 5956] <... chdir resumed>) = 0 [pid 5955] <... chdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... ioctl resumed>) = 0 [pid 5956] <... prctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] setpgid(0, 0 [pid 5832] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5956] <... setpgid resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] newfstatat(3, "", [pid 5956] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5955] <... prctl resumed>) = 0 [pid 5831] close(3 [pid 5830] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5956] write(3, "1000", 4 [pid 5955] setpgid(0, 0 [pid 5832] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5955] <... setpgid resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./22/file1", [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5956] <... write resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5956] close(3 [pid 5832] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5956] <... close resumed>) = 0 [pid 5955] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(4, ./strace-static-x86_64: Process 5957 attached [pid 5956] symlink("/dev/binderfs", "./binderfs" [pid 5955] write(3, "1000", 4executing program [pid 5832] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5956] <... symlink resumed>) = 0 [pid 5955] <... write resumed>) = 4 [pid 5956] write(1, "executing program\n", 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5957] set_robust_list(0x555557df1660, 24 [pid 5956] <... write resumed>) = 18 [pid 5832] unlink("./23/binderfs" [pid 5955] close(3 [pid 5832] <... unlink resumed>) = 0 [pid 5830] getdents64(4, [pid 5956] memfd_create("syzkaller", 0 [pid 5955] <... close resumed>) = 0 [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5956] <... memfd_create resumed>) = 3 [pid 5955] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5957 [pid 5830] close(4 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] <... symlink resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5956] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] rmdir("./22/file1"executing program [pid 5955] write(1, "executing program\n", 18) = 18 [pid 5955] memfd_create("syzkaller", 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5955] <... memfd_create resumed>) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... umount2 resumed>) = 0 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./22") = 0 [pid 5830] mkdir("./23", 0777 [pid 5957] chdir("./23" [pid 5830] <... mkdir resumed>) = 0 [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5957] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] newfstatat(AT_FDCWD, "./23/file1", [pid 5957] <... prctl resumed>) = 0 [pid 5957] setpgid(0, 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5957] <... setpgid resumed>) = 0 [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5957] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5957] write(3, "1000", 4 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5957] <... write resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5830] close(3 [pid 5957] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5957] <... close resumed>) = 0 [pid 5956] <... write resumed>) = 524288 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5955] <... write resumed>) = 524288 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5957] symlink("/dev/binderfs", "./binderfs" [pid 5956] munmap(0x7fd6d9800000, 138412032 [pid 5955] munmap(0x7fd6d9800000, 138412032 [pid 5832] getdents64(4, ./strace-static-x86_64: Process 5958 attached [pid 5957] <... symlink resumed>) = 0 executing program [pid 5956] <... munmap resumed>) = 0 [pid 5955] <... munmap resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5958] set_robust_list(0x555557df1660, 24 [pid 5957] write(1, "executing program\n", 18 [pid 5956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] close(4 [pid 5958] <... set_robust_list resumed>) = 0 [pid 5957] <... write resumed>) = 18 [pid 5956] <... openat resumed>) = 4 [pid 5955] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5958 [pid 5958] chdir("./23" [pid 5957] memfd_create("syzkaller", 0 [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 5832] rmdir("./23/file1" [pid 5957] <... memfd_create resumed>) = 3 [pid 5958] <... chdir resumed>) = 0 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5956] <... ioctl resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5957] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(3, [pid 5955] <... ioctl resumed>) = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5956] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5958] <... prctl resumed>) = 0 [pid 5956] <... close resumed>) = 0 [pid 5955] close(3 [pid 5832] close(3 [pid 5958] setpgid(0, 0 [pid 5956] close(4 [pid 5958] <... setpgid resumed>) = 0 [pid 5956] <... close resumed>) = 0 [pid 5955] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5957] <... write resumed>) = 524288 [pid 5956] mkdir("./file1", 0777 [pid 5955] close(4 [pid 5832] rmdir("./23" [pid 5958] <... openat resumed>) = 3 [pid 5956] <... mkdir resumed>) = 0 [pid 5955] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5955] mkdir("./file1", 0777 [pid 5832] mkdir("./24", 0777 [pid 5958] write(3, "1000", 4 [pid 5957] munmap(0x7fd6d9800000, 138412032 [pid 5955] <... mkdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5958] <... write resumed>) = 4 [pid 5956] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5958] close(3) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5958] symlink("/dev/binderfs", "./binderfs" [pid 5955] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5957] <... munmap resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5958] <... symlink resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... ioctl resumed>) = 0 [pid 5958] write(1, "executing program\n", 18executing program [pid 5832] close(3 [pid 5958] <... write resumed>) = 18 [pid 5958] memfd_create("syzkaller", 0) = 3 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5957] <... openat resumed>) = 4 [pid 5956] <... mount resumed>) = 0 [pid 5955] <... mount resumed>) = 0 [pid 5832] <... close resumed>) = 0 [ 67.217006][ T5956] loop4: detected capacity change from 0 to 1024 [ 67.217580][ T5955] loop0: detected capacity change from 0 to 1024 [pid 5958] <... mmap resumed>) = 0x7fd6d9800000 [pid 5957] ioctl(4, LOOP_SET_FD, 3 [pid 5956] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5955] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5955] chdir("./file1" [pid 5956] <... openat resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5956] chdir("./file1" [pid 5955] <... chdir resumed>) = 0 [pid 5956] <... chdir resumed>) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5956] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5959 attached ) = -1 EBUSY (Device or resource busy) [pid 5955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5955] chdir("./file0" [pid 5956] chdir("./file0" [pid 5959] set_robust_list(0x555557df1660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5959 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5959] chdir("./24") = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5955] <... chdir resumed>) = 0 [pid 5959] <... prctl resumed>) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5955] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5959] <... openat resumed>) = 3 [pid 5959] write(3, "1000", 4 [pid 5955] <... openat resumed>) = 4 [pid 5959] <... write resumed>) = 4 [pid 5956] <... chdir resumed>) = 0 [pid 5956] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5955] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5959] close(3 [pid 5956] <... openat resumed>) = 4 [pid 5959] <... close resumed>) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] write(1, "executing program\n", 18executing program ) = 18 [pid 5956] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5955] <... creat resumed>) = 5 [pid 5956] <... creat resumed>) = 5 [pid 5955] sync( [pid 5957] <... ioctl resumed>) = 0 [pid 5958] <... write resumed>) = 524288 [pid 5957] close(3 [pid 5956] sync( [pid 5957] <... close resumed>) = 0 [pid 5958] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5957] close(4) = 0 [pid 5957] mkdir("./file1", 0777 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5957] <... mkdir resumed>) = 0 [pid 5959] <... write resumed>) = 524288 [pid 5958] <... openat resumed>) = 4 [pid 5957] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5956] <... sync resumed>) = 0 [pid 5955] <... sync resumed>) = 0 [pid 5955] exit_group(0 [pid 5956] exit_group(0) = ? [pid 5955] <... exit_group resumed>) = ? [ 67.271133][ T5957] loop2: detected capacity change from 0 to 1024 [pid 5958] ioctl(4, LOOP_SET_FD, 3 [pid 5956] +++ exited with 0 +++ [pid 5955] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5957] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5957] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5957] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5959] munmap(0x7fd6d9800000, 138412032 [pid 5957] chdir("./file1" [pid 5833] newfstatat(3, "", [pid 5829] unlink("./23/binderfs" [pid 5959] <... munmap resumed>) = 0 [pid 5957] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] getdents64(3, [pid 5829] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5957] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5959] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5958] <... ioctl resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5959] <... openat resumed>) = 4 [pid 5957] <... chdir resumed>) = 0 [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5958] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5958] <... close resumed>) = 0 [pid 5957] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5958] close(4 [pid 5957] <... openat resumed>) = 4 [pid 5958] <... close resumed>) = 0 [pid 5833] unlink("./23/binderfs" [pid 5959] <... ioctl resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5959] close(3 [pid 5833] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5959] <... close resumed>) = 0 [pid 5959] close(4 [pid 5829] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5959] <... close resumed>) = 0 [pid 5959] mkdir("./file1", 0777 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5958] mkdir("./file1", 0777) = 0 [pid 5829] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5958] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... openat resumed>) = 4 [pid 5959] <... mkdir resumed>) = 0 [pid 5957] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5959] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./23/file1", [pid 5957] <... creat resumed>) = 5 [pid 5959] <... mount resumed>) = 0 [pid 5958] <... mount resumed>) = 0 [pid 5957] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(4 [pid 5958] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./file1") = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 5958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5958] chdir("./file0" [pid 5833] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./23/file1" [pid 5959] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... rmdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(3, [pid 5958] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5958] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5959] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5959] chdir("./file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 67.331174][ T5958] loop1: detected capacity change from 0 to 1024 [ 67.355625][ T5959] loop3: detected capacity change from 0 to 1024 [pid 5833] getdents64(4, [pid 5958] <... openat resumed>) = 4 [pid 5959] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5829] close(3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5958] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... close resumed>) = 0 [pid 5959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(4 [pid 5829] rmdir("./23" [pid 5959] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5958] <... creat resumed>) = 5 [pid 5833] rmdir("./23/file1" [pid 5959] <... chdir resumed>) = 0 [pid 5958] sync( [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5959] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5958] <... sync resumed>) = 0 [pid 5957] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] mkdir("./24", 0777 [pid 5959] <... openat resumed>) = 4 [pid 5958] exit_group(0 [pid 5957] exit_group(0 [pid 5833] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5957] <... exit_group resumed>) = ? [pid 5833] rmdir("./23" [pid 5957] +++ exited with 0 +++ [pid 5958] <... exit_group resumed>) = ? [pid 5833] <... rmdir resumed>) = 0 [pid 5958] +++ exited with 0 +++ [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5959] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] mkdir("./24", 0777 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 5959] <... creat resumed>) = 5 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5959] sync( [pid 5833] <... openat resumed>) = 3 [pid 5830] getdents64(3, [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5830] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./23/binderfs") = 0 ./strace-static-x86_64: Process 5960 attached [pid 5833] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = 0 [pid 5960] set_robust_list(0x555557df1660, 24) = 0 [pid 5960] chdir("./24") = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5960] setpgid(0, 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5960] <... setpgid resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] newfstatat(3, "", [pid 5830] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5960] <... openat resumed>) = 3 [pid 5959] <... sync resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5960] write(3, "1000", 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5960 ./strace-static-x86_64: Process 5961 attached [pid 5831] getdents64(3, [pid 5830] <... openat resumed>) = 4 [pid 5960] <... write resumed>) = 4 [pid 5961] set_robust_list(0x555557df1660, 24 [pid 5959] exit_group(0 [pid 5960] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5961 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] newfstatat(4, "", [pid 5961] <... set_robust_list resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5959] <... exit_group resumed>) = ? [pid 5831] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5961] chdir("./24" [pid 5960] symlink("/dev/binderfs", "./binderfs" [pid 5959] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(4, [pid 5960] <... symlink resumed>) = 0 [pid 5831] unlink("./23/binderfs" [pid 5961] <... chdir resumed>) = 0 [pid 5960] write(1, "executing program\n", 18executing program [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5960] <... write resumed>) = 18 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5961] <... prctl resumed>) = 0 [pid 5960] memfd_create("syzkaller", 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5961] setpgid(0, 0 [pid 5960] <... memfd_create resumed>) = 3 [pid 5830] close(4 [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5961] <... setpgid resumed>) = 0 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5960] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] newfstatat(AT_FDCWD, "./23/file1", [pid 5830] rmdir("./23/file1" [pid 5961] <... openat resumed>) = 3 [pid 5961] write(3, "1000", 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5961] <... write resumed>) = 4 [pid 5832] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5961] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5961] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] close(3 [pid 5961] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 4 [pid 5961] <... symlink resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 5961] write(1, "executing program\n", 18 [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] rmdir("./23"executing program [pid 5961] <... write resumed>) = 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] mkdir("./24", 0777 [pid 5832] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5830] <... mkdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./24/binderfs") = 0 [pid 5961] memfd_create("syzkaller", 0 [pid 5960] <... write resumed>) = 524288 [pid 5831] getdents64(4, [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] <... memfd_create resumed>) = 3 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5960] munmap(0x7fd6d9800000, 138412032 [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 3 [pid 5960] <... munmap resumed>) = 0 [pid 5831] getdents64(4, [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] close(4 [pid 5832] <... umount2 resumed>) = 0 [pid 5960] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5831] rmdir("./23/file1" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5960] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5962 attached [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5962 [pid 5962] set_robust_list(0x555557df1660, 24 [pid 5961] <... write resumed>) = 524288 [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5962] <... set_robust_list resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./24/file1", [pid 5831] close(3 [pid 5962] chdir("./24" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./23" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] mkdir("./24", 0777 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5962] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] getdents64(4, [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5962] <... prctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... ioctl resumed>) = 0 [pid 5962] setpgid(0, 0 [pid 5832] getdents64(4, [pid 5831] close(3 [pid 5962] <... setpgid resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5961] munmap(0x7fd6d9800000, 138412032 [pid 5832] close(4 [pid 5961] <... munmap resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] rmdir("./24/file1" [pid 5962] <... openat resumed>) = 3 [pid 5961] <... openat resumed>) = 4 [pid 5832] <... rmdir resumed>) = 0 [pid 5962] write(3, "1000", 4 [pid 5961] ioctl(4, LOOP_SET_FD, 3 [pid 5832] getdents64(3, [pid 5962] <... write resumed>) = 4 [pid 5960] <... ioctl resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5962] close(3executing program ) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs" [pid 5960] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] close(3) = 0 [pid 5962] <... symlink resumed>) = 0 [pid 5960] <... close resumed>) = 0 [pid 5832] rmdir("./24") = 0 [pid 5832] mkdir("./25", 0777 [pid 5962] write(1, "executing program\n", 18 [pid 5960] close(4 [pid 5962] <... write resumed>) = 18 [pid 5962] memfd_create("syzkaller", 0 [pid 5832] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5963 attached [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5962] <... memfd_create resumed>) = 3 [pid 5960] <... close resumed>) = 0 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5960] mkdir("./file1", 0777 [pid 5832] <... openat resumed>) = 3 [pid 5962] <... mmap resumed>) = 0x7fd6d9800000 [pid 5963] set_robust_list(0x555557df1660, 24 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5963] <... set_robust_list resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5963] chdir("./24" [pid 5960] <... mkdir resumed>) = 0 [pid 5832] close(3 [pid 5963] <... chdir resumed>) = 0 [pid 5961] <... ioctl resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] close(3 [pid 5960] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5963 [pid 5963] <... prctl resumed>) = 0 [pid 5961] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5963] setpgid(0, 0 [pid 5962] <... write resumed>) = 524288 [pid 5961] close(4 [pid 5960] <... mount resumed>) = 0 [pid 5963] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5964 attached [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5961] <... close resumed>) = 0 [pid 5960] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5963] <... openat resumed>) = 3 [pid 5961] mkdir("./file1", 0777 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5964 [pid 5963] write(3, "1000", 4 [pid 5961] <... mkdir resumed>) = 0 [pid 5963] <... write resumed>) = 4 [pid 5961] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5964] set_robust_list(0x555557df1660, 24 [pid 5963] close(3 [pid 5960] <... openat resumed>) = 3 [pid 5964] <... set_robust_list resumed>) = 0 [pid 5963] <... close resumed>) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs" [pid 5964] chdir("./25" [pid 5960] chdir("./file1" [pid 5964] <... chdir resumed>) = 0 [pid 5963] <... symlink resumed>) = 0 [pid 5960] <... chdir resumed>) = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program [pid 5963] write(1, "executing program\n", 18 [pid 5960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5964] setpgid(0, 0 [pid 5963] <... write resumed>) = 18 [pid 5962] munmap(0x7fd6d9800000, 138412032 [pid 5964] <... setpgid resumed>) = 0 [pid 5960] chdir("./file0" [pid 5963] memfd_create("syzkaller", 0 [pid 5962] <... munmap resumed>) = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5963] <... memfd_create resumed>) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5962] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5963] <... mmap resumed>) = 0x7fd6d9800000 [pid 5962] <... openat resumed>) = 4 [pid 5964] <... openat resumed>) = 3 [ 67.569634][ T5960] loop0: detected capacity change from 0 to 1024 [ 67.592662][ T5961] loop4: detected capacity change from 0 to 1024 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 5960] <... chdir resumed>) = 0 [pid 5964] write(3, "1000", 4 [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5961] <... mount resumed>) = 0 [pid 5961] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5961] chdir("./file1") = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5961] chdir("./file0" [pid 5964] <... write resumed>) = 4 [pid 5964] close(3 [pid 5960] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5964] <... close resumed>) = 0 [pid 5963] <... write resumed>) = 524288 [pid 5960] <... openat resumed>) = 4 [pid 5964] symlink("/dev/binderfs", "./binderfs" [pid 5961] <... chdir resumed>) = 0 [pid 5960] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5961] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5964] <... symlink resumed>) = 0 [pid 5961] <... openat resumed>) = 4 [pid 5964] write(1, "executing program\n", 18 [pid 5961] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5964] <... write resumed>) = 18 executing program [pid 5964] memfd_create("syzkaller", 0) = 3 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5963] munmap(0x7fd6d9800000, 138412032 [pid 5962] <... ioctl resumed>) = 0 [pid 5960] <... creat resumed>) = 5 [pid 5963] <... munmap resumed>) = 0 [pid 5962] close(3) = 0 [pid 5962] close(4) = 0 [pid 5962] mkdir("./file1", 0777) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5962] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5963] <... openat resumed>) = 4 [pid 5961] <... creat resumed>) = 5 [pid 5960] sync( [pid 5961] sync( [pid 5963] ioctl(4, LOOP_SET_FD, 3 [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5963] <... ioctl resumed>) = 0 [pid 5963] close(3) = 0 [pid 5963] close(4) = 0 [pid 5962] <... mount resumed>) = 0 [pid 5962] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5962] chdir("./file1") = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5964] <... write resumed>) = 524288 [pid 5963] mkdir("./file1", 0777 [pid 5962] chdir("./file0" [pid 5963] <... mkdir resumed>) = 0 [pid 5961] <... sync resumed>) = 0 [pid 5960] <... sync resumed>) = 0 [pid 5963] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5960] exit_group(0 [pid 5961] exit_group(0) = ? [pid 5960] <... exit_group resumed>) = ? [pid 5961] +++ exited with 0 +++ [pid 5960] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5964] munmap(0x7fd6d9800000, 138412032 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5964] <... munmap resumed>) = 0 [ 67.649076][ T5962] loop1: detected capacity change from 0 to 1024 [ 67.683628][ T5963] loop2: detected capacity change from 0 to 1024 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... restart_syscall resumed>) = 0 [pid 5964] <... openat resumed>) = 4 [pid 5964] ioctl(4, LOOP_SET_FD, 3 [pid 5829] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5962] <... chdir resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5962] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5962] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./24/binderfs") = 0 [pid 5829] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5962] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5964] <... ioctl resumed>) = 0 [pid 5963] <... mount resumed>) = 0 [pid 5962] <... creat resumed>) = 5 [pid 5829] <... umount2 resumed>) = 0 [pid 5964] close(3 [pid 5963] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5962] sync( [pid 5833] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5964] <... close resumed>) = 0 [pid 5964] close(4) = 0 [pid 5964] mkdir("./file1", 0777 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5964] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5964] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5963] <... openat resumed>) = 3 [pid 5962] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5829] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5963] chdir("./file1" [pid 5962] exit_group(0 [pid 5833] newfstatat(3, "", [pid 5963] <... chdir resumed>) = 0 [pid 5962] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5962] +++ exited with 0 +++ [pid 5833] getdents64(3, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5963] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] newfstatat(AT_FDCWD, "./24/file1", [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5963] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] unlink("./24/binderfs" [pid 5829] <... openat resumed>) = 4 [pid 5833] <... unlink resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 5833] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5963] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] getdents64(4, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5964] <... mount resumed>) = 0 [pid 5829] getdents64(4, [pid 5964] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5963] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5964] <... openat resumed>) = 3 [pid 5830] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5963] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [ 67.722266][ T5964] loop3: detected capacity change from 0 to 1024 [pid 5964] chdir("./file1" [pid 5830] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./24/file1" [pid 5964] <... chdir resumed>) = 0 [pid 5833] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5963] <... creat resumed>) = 5 [pid 5830] newfstatat(3, "", [pid 5829] getdents64(3, [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5964] chdir("./file0" [pid 5829] close(3) = 0 [pid 5829] rmdir("./24" [pid 5833] newfstatat(AT_FDCWD, "./24/file1", [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./25", 0777) = 0 [pid 5964] <... chdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5963] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5964] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... openat resumed>) = 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5829] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] unlink("./24/binderfs" [pid 5964] <... openat resumed>) = 4 [pid 5964] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(4, "", [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(4, [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5964] <... creat resumed>) = 5 [pid 5963] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5965 attached [pid 5964] sync( [pid 5963] exit_group(0 [pid 5833] getdents64(4, [pid 5965] set_robust_list(0x555557df1660, 24) = 0 [pid 5830] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] chdir("./25" [pid 5963] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5965] <... chdir resumed>) = 0 [pid 5963] +++ exited with 0 +++ [pid 5833] close(4 [pid 5830] newfstatat(AT_FDCWD, "./24/file1", [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5965 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5965] <... prctl resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5965] setpgid(0, 0 [pid 5830] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] <... setpgid resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] rmdir("./24/file1" [pid 5830] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] <... openat resumed>) = 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5965] write(3, "1000", 4 [pid 5830] <... openat resumed>) = 4 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5965] <... write resumed>) = 4 [pid 5964] <... sync resumed>) = 0 [pid 5833] rmdir("./24" [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5965] close(3 [pid 5964] exit_group(0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5965] <... close resumed>) = 0 [pid 5964] <... exit_group resumed>) = ? [pid 5833] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5965] symlink("/dev/binderfs", "./binderfs" [pid 5831] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(4, [pid 5831] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5965] <... symlink resumed>) = 0 [pid 5833] mkdir("./25", 0777 [pid 5831] <... openat resumed>) = 3 [pid 5830] close(4 [pid 5965] write(1, "executing program\n", 18 [pid 5964] +++ exited with 0 +++ [pid 5833] <... mkdir resumed>) = 0 executing program [pid 5831] newfstatat(3, "", [pid 5830] <... close resumed>) = 0 [pid 5965] <... write resumed>) = 18 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] rmdir("./24/file1" [pid 5965] memfd_create("syzkaller", 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(3, [pid 5830] <... rmdir resumed>) = 0 [pid 5965] <... memfd_create resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] getdents64(3, [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5965] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] close(3 [pid 5831] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5830] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./24/binderfs" [pid 5830] rmdir("./24" [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5831] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] mkdir("./25", 0777) = 0 [pid 5832] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5832] newfstatat(3, "", [pid 5830] <... ioctl resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached [pid 5965] <... write resumed>) = 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5966 [pid 5830] <... close resumed>) = 0 [pid 5832] getdents64(3, [pid 5966] set_robust_list(0x555557df1660, 24) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5966] chdir("./25" [pid 5832] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5966] <... chdir resumed>) = 0 [pid 5832] unlink("./25/binderfs" [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... unlink resumed>) = 0 [pid 5966] <... prctl resumed>) = 0 [pid 5832] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] setpgid(0, 0 [pid 5831] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... setpgid resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] newfstatat(AT_FDCWD, "./24/file1", [pid 5966] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5967 attached [pid 5966] write(3, "1000", 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5966] <... write resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5966] close(3 [pid 5965] munmap(0x7fd6d9800000, 138412032executing program [pid 5832] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 4 [pid 5966] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5967 [pid 5966] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5966] <... symlink resumed>) = 0 [pid 5965] <... munmap resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./25/file1", [pid 5831] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5966] write(1, "executing program\n", 18 [pid 5831] getdents64(4, [pid 5966] <... write resumed>) = 18 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(4) = 0 [pid 5966] <... memfd_create resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] rmdir("./24/file1" [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... rmdir resumed>) = 0 [pid 5967] set_robust_list(0x555557df1660, 24 [pid 5966] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] newfstatat(4, "", [pid 5967] <... set_robust_list resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5967] chdir("./25" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5832] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./24" [pid 5967] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] close(4 [pid 5967] setpgid(0, 0 [pid 5832] <... close resumed>) = 0 [pid 5967] <... setpgid resumed>) = 0 [pid 5832] rmdir("./25/file1" [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... rmdir resumed>) = 0 [pid 5967] <... openat resumed>) = 3 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] mkdir("./25", 0777 [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 5832] rmdir("./25" [pid 5831] <... mkdir resumed>) = 0 [pid 5967] <... symlink resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5967] write(1, "executing program\n", 18 [pid 5831] <... openat resumed>) = 3 executing program [pid 5832] mkdir("./26", 0777 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5967] <... write resumed>) = 18 [pid 5967] memfd_create("syzkaller", 0 [pid 5965] <... ioctl resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5967] <... memfd_create resumed>) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5965] close(3 [pid 5831] close(3 [pid 5967] <... mmap resumed>) = 0x7fd6d9800000 [pid 5965] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5965] close(4 [pid 5832] <... openat resumed>) = 3 [pid 5965] <... close resumed>) = 0 [pid 5965] mkdir("./file1", 0777) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 5965] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x555557df1660, 24 [pid 5966] <... write resumed>) = 524288 [pid 5968] <... set_robust_list resumed>) = 0 [pid 5968] chdir("./25" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5968 [pid 5968] <... chdir resumed>) = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5966] munmap(0x7fd6d9800000, 138412032 [pid 5965] <... mount resumed>) = 0 [pid 5968] <... prctl resumed>) = 0 [pid 5966] <... munmap resumed>) = 0 [pid 5965] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5968] setpgid(0, 0 [pid 5965] <... openat resumed>) = 3 [pid 5968] <... setpgid resumed>) = 0 [pid 5965] chdir("./file1" [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5965] <... chdir resumed>) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5968] <... openat resumed>) = 3 [pid 5966] <... openat resumed>) = 4 [pid 5965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5968] write(3, "1000", 4 [ 67.890467][ T5965] loop0: detected capacity change from 0 to 1024 [pid 5966] ioctl(4, LOOP_SET_FD, 3 [pid 5965] chdir("./file0" [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5968] <... write resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5968] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5968] <... close resumed>) = 0 [pid 5969] set_robust_list(0x555557df1660, 24 [pid 5968] symlink("/dev/binderfs", "./binderfs"executing program [pid 5969] <... set_robust_list resumed>) = 0 [pid 5968] <... symlink resumed>) = 0 [pid 5968] write(1, "executing program\n", 18 [pid 5965] <... chdir resumed>) = 0 [pid 5968] <... write resumed>) = 18 [pid 5965] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5968] memfd_create("syzkaller", 0 [pid 5965] <... openat resumed>) = 4 [pid 5968] <... memfd_create resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5969 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5965] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5969] chdir("./26" [pid 5967] <... write resumed>) = 524288 [pid 5966] <... ioctl resumed>) = 0 [pid 5969] <... chdir resumed>) = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] munmap(0x7fd6d9800000, 138412032 [pid 5969] setpgid(0, 0 [pid 5967] <... munmap resumed>) = 0 [pid 5969] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5967] <... openat resumed>) = 4 [pid 5966] close(3 [pid 5965] <... creat resumed>) = 5 [pid 5969] <... openat resumed>) = 3 [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... close resumed>) = 0 [pid 5965] sync( [pid 5969] write(3, "1000", 4 [pid 5966] close(4 [pid 5968] <... write resumed>) = 524288 [pid 5966] <... close resumed>) = 0 [pid 5966] mkdir("./file1", 0777 [pid 5969] <... write resumed>) = 4 [pid 5967] <... ioctl resumed>) = 0 [pid 5966] <... mkdir resumed>) = 0 [pid 5966] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5969] close(3 [pid 5967] close(3 [pid 5969] <... close resumed>) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs" [pid 5967] <... close resumed>) = 0 [pid 5969] <... symlink resumed>) = 0 [pid 5967] close(4 [pid 5969] write(1, "executing program\n", 18 [pid 5967] <... close resumed>) = 0 executing program [pid 5969] <... write resumed>) = 18 [pid 5967] mkdir("./file1", 0777 [pid 5968] munmap(0x7fd6d9800000, 138412032 [pid 5967] <... mkdir resumed>) = 0 [pid 5968] <... munmap resumed>) = 0 [pid 5967] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5968] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5966] <... mount resumed>) = 0 [ 67.941144][ T5966] loop4: detected capacity change from 0 to 1024 [ 67.975469][ T5967] loop1: detected capacity change from 0 to 1024 [pid 5968] <... openat resumed>) = 4 [pid 5966] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5969] memfd_create("syzkaller", 0 [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... openat resumed>) = 3 [pid 5969] <... memfd_create resumed>) = 3 [pid 5967] <... mount resumed>) = 0 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5966] chdir("./file1" [pid 5969] <... mmap resumed>) = 0x7fd6d9800000 [pid 5967] <... openat resumed>) = 3 [pid 5967] chdir("./file1" [pid 5966] <... chdir resumed>) = 0 [pid 5967] <... chdir resumed>) = 0 [pid 5965] <... sync resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5966] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5965] exit_group(0 [pid 5966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5966] chdir("./file0" [pid 5967] chdir("./file0" [pid 5965] <... exit_group resumed>) = ? [pid 5966] <... chdir resumed>) = 0 [pid 5966] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5965] +++ exited with 0 +++ [pid 5967] <... chdir resumed>) = 0 [pid 5966] <... openat resumed>) = 4 [pid 5967] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5968] <... ioctl resumed>) = 0 [pid 5966] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5968] close(3) = 0 [pid 5968] close(4) = 0 [pid 5967] <... openat resumed>) = 4 [pid 5968] mkdir("./file1", 0777) = 0 [pid 5967] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5968] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5969] <... write resumed>) = 524288 [pid 5967] <... creat resumed>) = 5 [pid 5966] <... creat resumed>) = 5 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5967] sync( [pid 5829] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5966] sync( [pid 5829] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 68.001781][ T5968] loop2: detected capacity change from 0 to 1024 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5969] munmap(0x7fd6d9800000, 138412032 [pid 5829] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./25/binderfs") = 0 [pid 5829] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5969] <... munmap resumed>) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5968] <... mount resumed>) = 0 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5968] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file1") = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5968] chdir("./file0") = 0 [pid 5968] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5968] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5969] <... ioctl resumed>) = 0 [pid 5969] close(3) = 0 [pid 5969] close(4) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5969] mkdir("./file1", 0777) = 0 [pid 5968] <... creat resumed>) = 5 [pid 5829] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5969] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./25/file1", [pid 5969] <... mount resumed>) = 0 [pid 5968] sync( [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5969] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5967] <... sync resumed>) = 0 [pid 5966] <... sync resumed>) = 0 [pid 5829] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5969] <... openat resumed>) = 3 [pid 5967] exit_group(0 [pid 5966] exit_group(0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] chdir("./file1") = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5969] chdir("./file0" [pid 5967] <... exit_group resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 5829] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5966] +++ exited with 0 +++ [ 68.075970][ T5969] loop3: detected capacity change from 0 to 1024 [pid 5969] <... chdir resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5969] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5968] <... sync resumed>) = 0 [pid 5967] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] newfstatat(4, "", [pid 5969] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5968] exit_group(0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5968] <... exit_group resumed>) = ? [pid 5833] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5969] <... creat resumed>) = 5 [pid 5968] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5969] sync( [pid 5833] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] close(4 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5831] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5829] rmdir("./25/file1" [pid 5831] newfstatat(3, "", [pid 5830] newfstatat(3, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5831] getdents64(3, [pid 5830] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5830] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./25/binderfs" [pid 5830] unlink("./25/binderfs" [pid 5833] unlink("./25/binderfs" [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5829] rmdir("./25" [pid 5969] <... sync resumed>) = 0 [pid 5833] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5831] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... rmdir resumed>) = 0 [pid 5969] exit_group(0 [pid 5831] newfstatat(AT_FDCWD, "./25/file1", [pid 5830] newfstatat(AT_FDCWD, "./25/file1", [pid 5969] <... exit_group resumed>) = ? [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] mkdir("./26", 0777 [pid 5831] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5830] newfstatat(4, "", [pid 5969] +++ exited with 0 +++ [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] getdents64(4, [pid 5830] getdents64(4, [pid 5829] <... mkdir resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5830] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] close(4 [pid 5830] close(4 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5833] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./25/file1" [pid 5830] rmdir("./25/file1" [pid 5829] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] getdents64(3, [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./25/file1", [pid 5831] close(3 [pid 5830] close(3 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] close(3 [pid 5833] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./25" [pid 5830] rmdir("./25" [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5831] mkdir("./26", 0777 [pid 5830] mkdir("./26", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] close(3 [pid 5830] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5833] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./26/binderfs" [pid 5833] <... openat resumed>) = 4 [pid 5832] <... unlink resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5970 attached [pid 5833] getdents64(4, [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5970 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [ 68.124295][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 68.124312][ T29] audit: type=1800 audit(1730647667.767:132): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 ./strace-static-x86_64: Process 5971 attached [pid 5833] close(4 [pid 5831] <... close resumed>) = 0 [pid 5970] set_robust_list(0x555557df1660, 24 [pid 5833] <... close resumed>) = 0 [pid 5970] <... set_robust_list resumed>) = 0 [pid 5833] rmdir("./25/file1" [pid 5971] set_robust_list(0x555557df1660, 24 [pid 5970] chdir("./26" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5971 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5971] chdir("./26" [pid 5970] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5832] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5971] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./26/file1", ./strace-static-x86_64: Process 5972 attached [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5972] set_robust_list(0x555557df1660, 24 [pid 5971] <... prctl resumed>) = 0 [pid 5832] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5971] setpgid(0, 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] <... set_robust_list resumed>) = 0 [pid 5971] <... setpgid resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] getdents64(3, [pid 5972] chdir("./26" [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5970] <... prctl resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5972 [pid 5972] <... chdir resumed>) = 0 [pid 5971] <... openat resumed>) = 3 [pid 5970] setpgid(0, 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(4, "", [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5971] write(3, "1000", 4 [pid 5970] <... setpgid resumed>) = 0 [pid 5833] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5972] <... prctl resumed>) = 0 [pid 5971] <... write resumed>) = 4 [pid 5832] getdents64(4, [pid 5972] setpgid(0, 0 [pid 5971] close(3 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5972] <... setpgid resumed>) = 0 [pid 5971] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5971] symlink("/dev/binderfs", "./binderfs" [pid 5970] <... openat resumed>) = 3 [pid 5833] rmdir("./25" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5972] <... openat resumed>) = 3 [pid 5971] <... symlink resumed>) = 0 [pid 5832] close(4 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5833] mkdir("./26", 0777 [pid 5832] rmdir("./26/file1" [pid 5972] write(3, "1000", 4 [pid 5832] <... rmdir resumed>) = 0 [pid 5972] <... write resumed>) = 4 executing program [pid 5971] write(1, "executing program\n", 18 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5972] close(3 [pid 5971] <... write resumed>) = 18 [pid 5970] write(3, "1000", 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5972] <... close resumed>) = 0 [pid 5971] memfd_create("syzkaller", 0 [pid 5970] <... write resumed>) = 4 [pid 5972] symlink("/dev/binderfs", "./binderfs" [pid 5970] close(3 [pid 5832] close(3 [pid 5972] <... symlink resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5971] <... memfd_create resumed>) = 3 [pid 5970] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... close resumed>) = 0 [pid 5972] write(1, "executing program\n", 18 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 5832] rmdir("./26" [pid 5972] <... write resumed>) = 18 [pid 5971] <... mmap resumed>) = 0x7fd6d9800000 [pid 5970] <... symlink resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5833] ioctl(3, LOOP_CLR_FDexecuting program [pid 5970] write(1, "executing program\n", 18 [pid 5833] <... ioctl resumed>) = 0 [pid 5972] <... memfd_create resumed>) = 3 [pid 5970] <... write resumed>) = 18 [pid 5833] close(3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5970] memfd_create("syzkaller", 0 [pid 5972] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] mkdir("./27", 0777 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5970] <... memfd_create resumed>) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5970] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... close resumed>) = 0 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... close resumed>) = 0 [pid 5972] <... write resumed>) = 524288 [pid 5971] <... write resumed>) = 524288 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached ./strace-static-x86_64: Process 5974 attached [pid 5973] set_robust_list(0x555557df1660, 24 [pid 5974] set_robust_list(0x555557df1660, 24) = 0 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5972] munmap(0x7fd6d9800000, 138412032 [pid 5971] munmap(0x7fd6d9800000, 138412032 [pid 5970] <... write resumed>) = 524288 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5973 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5974 [pid 5974] chdir("./27" [pid 5973] chdir("./26" [pid 5972] <... munmap resumed>) = 0 [pid 5971] <... munmap resumed>) = 0 [pid 5970] munmap(0x7fd6d9800000, 138412032 [pid 5974] <... chdir resumed>) = 0 [pid 5973] <... chdir resumed>) = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5971] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5970] <... munmap resumed>) = 0 [pid 5974] <... prctl resumed>) = 0 [pid 5973] <... prctl resumed>) = 0 [pid 5971] <... openat resumed>) = 4 [pid 5974] setpgid(0, 0 [pid 5973] setpgid(0, 0 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5974] <... setpgid resumed>) = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5973] <... setpgid resumed>) = 0 [pid 5974] <... openat resumed>) = 3 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5970] <... openat resumed>) = 4 [pid 5974] write(3, "1000", 4 [pid 5970] ioctl(4, LOOP_SET_FD, 3executing program [pid 5974] <... write resumed>) = 4 [pid 5973] <... openat resumed>) = 3 [pid 5974] close(3) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5974] symlink("/dev/binderfs", "./binderfs" [pid 5972] <... openat resumed>) = 4 [pid 5974] <... symlink resumed>) = 0 [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5974] write(1, "executing program\n", 18 [pid 5972] <... ioctl resumed>) = 0 [pid 5974] <... write resumed>) = 18 [pid 5973] write(3, "1000", 4 [pid 5971] <... ioctl resumed>) = 0 [pid 5970] <... ioctl resumed>) = 0 [pid 5974] memfd_create("syzkaller", 0 [pid 5971] close(3 [pid 5970] close(3 [pid 5973] <... write resumed>) = 4 [pid 5974] <... memfd_create resumed>) = 3 [pid 5972] close(3 [pid 5971] <... close resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5973] close(3 [pid 5972] <... close resumed>) = 0 [pid 5971] close(4 [pid 5970] close(4 [pid 5974] <... mmap resumed>) = 0x7fd6d9800000 [pid 5972] close(4 [pid 5971] <... close resumed>) = 0 [pid 5970] <... close resumed>) = 0 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5973] <... close resumed>) = 0 [pid 5972] <... close resumed>) = 0 [ 68.277820][ T5971] loop1: detected capacity change from 0 to 1024 [ 68.287051][ T5970] loop0: detected capacity change from 0 to 1024 [ 68.296001][ T5972] loop2: detected capacity change from 0 to 1024 [pid 5971] mkdir("./file1", 0777 [pid 5970] mkdir("./file1", 0777 [pid 5973] symlink("/dev/binderfs", "./binderfs" [pid 5972] mkdir("./file1", 0777 [pid 5971] <... mkdir resumed>) = 0 [pid 5970] <... mkdir resumed>) = 0 [pid 5973] <... symlink resumed>) = 0 [pid 5972] <... mkdir resumed>) = 0 [pid 5970] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5972] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, ""executing program [pid 5973] write(1, "executing program\n", 18 [pid 5971] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5973] <... write resumed>) = 18 [pid 5973] memfd_create("syzkaller", 0) = 3 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5972] <... mount resumed>) = 0 [pid 5972] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5974] <... write resumed>) = 524288 [pid 5972] <... openat resumed>) = 3 [pid 5972] chdir("./file1") = 0 [pid 5971] <... mount resumed>) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5971] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5971] <... openat resumed>) = 3 [pid 5972] chdir("./file0" [pid 5971] chdir("./file1") = 0 [pid 5974] munmap(0x7fd6d9800000, 138412032 [pid 5971] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5974] <... munmap resumed>) = 0 [pid 5971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5971] chdir("./file0" [pid 5974] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5972] <... chdir resumed>) = 0 [pid 5970] <... mount resumed>) = 0 [pid 5974] <... openat resumed>) = 4 [pid 5971] <... chdir resumed>) = 0 [pid 5974] ioctl(4, LOOP_SET_FD, 3 [pid 5972] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5971] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5970] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5973] <... write resumed>) = 524288 [pid 5972] <... openat resumed>) = 4 [pid 5971] <... openat resumed>) = 4 [pid 5970] <... openat resumed>) = 3 [pid 5970] chdir("./file1") = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5970] chdir("./file0" [pid 5972] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5970] <... chdir resumed>) = 0 [pid 5970] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5972] <... creat resumed>) = 5 [pid 5970] <... openat resumed>) = 4 [pid 5974] <... ioctl resumed>) = 0 [pid 5973] munmap(0x7fd6d9800000, 138412032 [pid 5972] sync( [pid 5971] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5970] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5974] close(3 [pid 5973] <... munmap resumed>) = 0 [pid 5974] <... close resumed>) = 0 [pid 5974] close(4) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5971] <... creat resumed>) = 5 [pid 5970] <... creat resumed>) = 5 [pid 5970] sync( [pid 5971] sync( [pid 5974] mkdir("./file1", 0777 [pid 5973] <... openat resumed>) = 4 [pid 5974] <... mkdir resumed>) = 0 [ 68.389959][ T5974] loop3: detected capacity change from 0 to 1024 [ 68.392760][ T29] audit: type=1800 audit(1730647668.027:133): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 68.419517][ T29] audit: type=1800 audit(1730647668.027:134): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5973] ioctl(4, LOOP_SET_FD, 3 [pid 5974] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5973] <... ioctl resumed>) = 0 [pid 5974] <... mount resumed>) = 0 [pid 5974] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5974] chdir("./file1") = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5974] chdir("./file0" [pid 5973] close(3) = 0 [pid 5973] close(4) = 0 [pid 5973] mkdir("./file1", 0777) = 0 [pid 5973] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5974] <... chdir resumed>) = 0 [pid 5973] <... mount resumed>) = 0 [pid 5973] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5973] chdir("./file1") = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5974] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5974] <... openat resumed>) = 4 [pid 5974] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 68.438339][ T5973] loop4: detected capacity change from 0 to 1024 [ 68.448937][ T29] audit: type=1800 audit(1730647668.037:135): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5973] chdir("./file0" [pid 5972] <... sync resumed>) = 0 [pid 5971] <... sync resumed>) = 0 [pid 5971] exit_group(0) = ? [pid 5971] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5970] <... sync resumed>) = 0 [pid 5974] <... creat resumed>) = 5 [pid 5973] <... chdir resumed>) = 0 [pid 5972] exit_group(0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5973] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5972] <... exit_group resumed>) = ? [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [ 68.494354][ T29] audit: type=1800 audit(1730647668.127:136): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5974] sync( [pid 5972] +++ exited with 0 +++ [pid 5830] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./26/binderfs") = 0 [pid 5830] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5973] <... openat resumed>) = 4 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./26/binderfs") = 0 [pid 5831] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5974] <... sync resumed>) = 0 [pid 5973] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5970] exit_group(0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5974] exit_group(0 [pid 5970] <... exit_group resumed>) = ? [pid 5831] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5970] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 4 [pid 5974] <... exit_group resumed>) = ? [pid 5831] newfstatat(4, "", [pid 5830] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./26/file1" [pid 5974] +++ exited with 0 +++ [pid 5831] <... rmdir resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5974, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(3, [pid 5973] <... creat resumed>) = 5 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... restart_syscall resumed>) = 0 [pid 5973] sync( [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(AT_FDCWD, "./26/file1", [pid 5831] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] rmdir("./26" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] mkdir("./27", 0777 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5829] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 68.527170][ T29] audit: type=1800 audit(1730647668.167:137): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 5829] newfstatat(3, "", [pid 5973] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5973] exit_group(0 [pid 5832] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5830] getdents64(4, [pid 5829] getdents64(3, [pid 5973] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5831] <... ioctl resumed>) = 0 [pid 5829] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] close(3 [pid 5830] close(4 [pid 5832] unlink("./27/binderfs" [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./26/file1" [pid 5973] +++ exited with 0 +++ [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./26" [pid 5832] <... umount2 resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... rmdir resumed>) = 0 [pid 5829] unlink("./26/binderfs"./strace-static-x86_64: Process 5975 attached [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] mkdir("./27", 0777 [pid 5832] newfstatat(AT_FDCWD, "./27/file1", [pid 5975] set_robust_list(0x555557df1660, 24 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5833] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5975] chdir("./27" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5975] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5975 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, executing program [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] newfstatat(4, "", [pid 5975] <... prctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5975] setpgid(0, 0) = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5975] <... openat resumed>) = 3 [pid 5832] close(4) = 0 [pid 5832] rmdir("./27/file1") = 0 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5975] write(1, "executing program\n", 18 [pid 5832] rmdir("./27" [pid 5975] <... write resumed>) = 18 [pid 5832] <... rmdir resumed>) = 0 [pid 5975] memfd_create("syzkaller", 0 [pid 5833] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] mkdir("./28", 0777 [pid 5830] close(3 [pid 5829] <... umount2 resumed>) = 0 [pid 5975] <... memfd_create resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... mkdir resumed>) = 0 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5975] <... mmap resumed>) = 0x7fd6d9800000 [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3) = 0 [pid 5975] <... write resumed>) = 524288 [pid 5833] unlink("./26/binderfs" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] newfstatat(AT_FDCWD, "./26/file1", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5829] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5977 attached ./strace-static-x86_64: Process 5976 attached [pid 5975] munmap(0x7fd6d9800000, 138412032 [pid 5833] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5975] <... munmap resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5976 [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5977 [pid 5976] set_robust_list(0x555557df1660, 24 [pid 5977] set_robust_list(0x555557df1660, 24 [pid 5975] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 5833] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5977] <... set_robust_list resumed>) = 0 [pid 5976] <... set_robust_list resumed>) = 0 [pid 5975] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5833] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(4 [pid 5833] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5829] rmdir("./26/file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5829] getdents64(3, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./26" [pid 5977] chdir("./28" [pid 5976] chdir("./27" [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./27", 0777 [pid 5977] <... chdir resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./26/file1") = 0 [pid 5833] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5976] <... prctl resumed>) = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5976] setpgid(0, 0 [pid 5975] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5977] setpgid(0, 0 [pid 5976] <... setpgid resumed>) = 0 [pid 5975] close(3 [pid 5833] <... close resumed>) = 0 [pid 5977] <... setpgid resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5975] <... close resumed>) = 0 [pid 5833] rmdir("./26" [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] <... openat resumed>) = 3 [pid 5975] close(4 [pid 5976] write(3, "1000", 4 [pid 5975] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5976] <... write resumed>) = 4 [pid 5975] mkdir("./file1", 0777 [pid 5833] mkdir("./27", 0777 [pid 5977] <... openat resumed>) = 3 [pid 5976] close(3 [pid 5975] <... mkdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5977] write(3, "1000", 4 [pid 5976] <... close resumed>) = 0 [pid 5975] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5977] <... write resumed>) = 4 ./strace-static-x86_64: Process 5978 attached [pid 5977] close(3 [pid 5976] symlink("/dev/binderfs", "./binderfs" [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5978 [pid 5977] <... close resumed>) = 0 [pid 5976] <... symlink resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5977] symlink("/dev/binderfs", "./binderfs" [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 5977] <... symlink resumed>) = 0 [pid 5976] write(1, "executing program\n", 18 [pid 5833] <... close resumed>) = 0 [pid 5978] set_robust_list(0x555557df1660, 24executing program executing program executing program ) = 0 [pid 5977] write(1, "executing program\n", 18 [pid 5976] <... write resumed>) = 18 [pid 5977] <... write resumed>) = 18 [pid 5978] chdir("./27" [pid 5976] memfd_create("syzkaller", 0 [pid 5978] <... chdir resumed>) = 0 [pid 5977] memfd_create("syzkaller", 0 [pid 5976] <... memfd_create resumed>) = 3 [pid 5977] <... memfd_create resumed>) = 3 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5976] <... mmap resumed>) = 0x7fd6d9800000 [pid 5977] <... mmap resumed>) = 0x7fd6d9800000 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5978] setpgid(0, 0) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5978] write(3, "1000", 4) = 4 [pid 5978] close(3) = 0 [pid 5978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] write(1, "executing program\n", 18./strace-static-x86_64: Process 5979 attached ) = 18 [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5979] set_robust_list(0x555557df1660, 24 [pid 5978] memfd_create("syzkaller", 0) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5979 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5979] chdir("./27") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [ 68.685129][ T5975] loop2: detected capacity change from 0 to 1024 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] write(1, "executing program\n", 18 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5977] <... write resumed>) = 524288 [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5975] <... mount resumed>) = 0 [pid 5976] <... write resumed>) = 524288 [pid 5975] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORYexecuting program [pid 5979] <... write resumed>) = 18 [pid 5977] munmap(0x7fd6d9800000, 138412032 [pid 5975] <... openat resumed>) = 3 [pid 5977] <... munmap resumed>) = 0 [pid 5975] chdir("./file1") = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5979] memfd_create("syzkaller", 0 [pid 5978] <... write resumed>) = 524288 [pid 5977] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5976] munmap(0x7fd6d9800000, 138412032 [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5979] <... memfd_create resumed>) = 3 [pid 5976] <... munmap resumed>) = 0 [pid 5975] chdir("./file0" [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5977] <... openat resumed>) = 4 [pid 5977] ioctl(4, LOOP_SET_FD, 3 [pid 5976] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5979] <... mmap resumed>) = 0x7fd6d9800000 [pid 5976] <... openat resumed>) = 4 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5975] <... chdir resumed>) = 0 [pid 5978] munmap(0x7fd6d9800000, 138412032) = 0 [ 68.772242][ T5977] loop3: detected capacity change from 0 to 1024 [ 68.780135][ T5976] loop1: detected capacity change from 0 to 1024 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5977] <... ioctl resumed>) = 0 [pid 5976] <... ioctl resumed>) = 0 [pid 5975] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5979] <... write resumed>) = 524288 [pid 5978] <... openat resumed>) = 4 [pid 5977] close(3 [pid 5976] close(3 [pid 5975] <... openat resumed>) = 4 [pid 5979] munmap(0x7fd6d9800000, 138412032 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5977] <... close resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5979] <... munmap resumed>) = 0 [pid 5975] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5977] close(4 [pid 5979] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5978] <... ioctl resumed>) = 0 [pid 5976] close(4 [pid 5975] <... creat resumed>) = 5 [pid 5977] <... close resumed>) = 0 [pid 5978] close(3 [pid 5977] mkdir("./file1", 0777 [pid 5979] <... openat resumed>) = 4 [pid 5978] <... close resumed>) = 0 [pid 5977] <... mkdir resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5975] sync( [pid 5978] close(4) = 0 [pid 5978] mkdir("./file1", 0777) = 0 [pid 5977] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5976] mkdir("./file1", 0777 [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 5976] <... mkdir resumed>) = 0 [pid 5978] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5977] <... mount resumed>) = 0 [pid 5976] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5978] <... mount resumed>) = 0 [pid 5977] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5978] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5977] <... openat resumed>) = 3 [pid 5978] <... openat resumed>) = 3 [pid 5977] chdir("./file1" [pid 5978] chdir("./file1" [pid 5977] <... chdir resumed>) = 0 [pid 5978] <... chdir resumed>) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5977] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5978] chdir("./file0" [pid 5977] chdir("./file0" [pid 5978] <... chdir resumed>) = 0 [pid 5977] <... chdir resumed>) = 0 [pid 5979] <... ioctl resumed>) = 0 [pid 5978] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5976] <... mount resumed>) = 0 [ 68.803553][ T29] audit: type=1800 audit(1730647668.447:138): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 68.808034][ T5978] loop0: detected capacity change from 0 to 1024 [ 68.842702][ T5979] loop4: detected capacity change from 0 to 1024 [pid 5976] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5979] close(3 [pid 5978] <... openat resumed>) = 4 [pid 5977] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5976] <... openat resumed>) = 3 [pid 5979] <... close resumed>) = 0 [pid 5977] <... openat resumed>) = 4 [pid 5979] close(4 [pid 5978] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5979] <... close resumed>) = 0 [pid 5979] mkdir("./file1", 0777 [pid 5977] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5978] <... creat resumed>) = 5 [pid 5977] <... creat resumed>) = 5 [pid 5978] sync( [pid 5977] sync( [pid 5976] chdir("./file1" [pid 5979] <... mkdir resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5975] <... sync resumed>) = 0 [pid 5975] exit_group(0 [pid 5976] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5975] <... exit_group resumed>) = ? [pid 5979] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] +++ exited with 0 +++ [pid 5976] chdir("./file0" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5979] <... mount resumed>) = 0 [pid 5976] <... chdir resumed>) = 0 [pid 5978] <... sync resumed>) = 0 [pid 5978] exit_group(0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5978] <... exit_group resumed>) = ? [pid 5978] +++ exited with 0 +++ [pid 5831] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./27/binderfs") = 0 [pid 5831] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5979] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5977] <... sync resumed>) = 0 [pid 5976] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5976] <... openat resumed>) = 4 [ 68.871089][ T29] audit: type=1800 audit(1730647668.507:139): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [ 68.901110][ T29] audit: type=1800 audit(1730647668.507:140): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5831] newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5979] <... openat resumed>) = 3 [pid 5976] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./27/file1") = 0 [pid 5831] getdents64(3, [pid 5979] chdir("./file1" [pid 5977] exit_group(0 [pid 5976] <... creat resumed>) = 5 [pid 5977] <... exit_group resumed>) = ? [pid 5979] <... chdir resumed>) = 0 [pid 5977] +++ exited with 0 +++ [pid 5976] sync( [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5979] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5979] chdir("./file0" [pid 5832] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... close resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5979] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] rmdir("./27" [pid 5979] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(3, "", [pid 5979] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5979] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] getdents64(3, [pid 5831] mkdir("./28", 0777 [pid 5979] <... creat resumed>) = 5 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5979] sync( [pid 5832] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5829] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... ioctl resumed>) = 0 [ 68.929410][ T29] audit: type=1800 audit(1730647668.567:141): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5829] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5832] unlink("./28/binderfs" [pid 5831] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5979] <... sync resumed>) = 0 [pid 5976] <... sync resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] unlink("./27/binderfs" [pid 5979] exit_group(0 [pid 5976] exit_group(0 [pid 5832] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5980 attached [pid 5979] <... exit_group resumed>) = ? [pid 5976] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = 0 [pid 5829] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5980] set_robust_list(0x555557df1660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5980 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5979] +++ exited with 0 +++ [pid 5976] +++ exited with 0 +++ [pid 5832] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] newfstatat(AT_FDCWD, "./28/file1", [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5976, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] chdir("./28" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] newfstatat(AT_FDCWD, "./27/file1", [pid 5980] <... chdir resumed>) = 0 [pid 5832] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] <... prctl resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5980] setpgid(0, 0 [pid 5832] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 5980] <... setpgid resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 5980] <... openat resumed>) = 3 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] getdents64(4, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5980] write(3, "1000", 4 [pid 5832] close(4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5980] <... write resumed>) = 4 [pid 5833] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5830] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5980] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5980] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] rmdir("./28/file1" [pid 5830] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./27/file1" [pid 5980] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... openat resumed>) = 3 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5980] <... symlink resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5830] newfstatat(3, "", [pid 5829] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5980] write(1, "executing program\n", 18 [pid 5833] getdents64(3, [pid 5832] close(3 [pid 5830] getdents64(3, [pid 5829] close(3 [pid 5980] <... write resumed>) = 18 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./28") = 0 [pid 5830] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5830] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5829] rmdir("./27" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5980] memfd_create("syzkaller", 0 [pid 5833] unlink("./27/binderfs" [pid 5832] mkdir("./29", 0777 [pid 5830] unlink("./27/binderfs" [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5833] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 5829] mkdir("./28", 0777 [pid 5980] <... memfd_create resumed>) = 3 [pid 5830] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] close(3 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5980] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... ioctl resumed>) = 0 [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(3) = 0 [pid 5830] newfstatat(AT_FDCWD, "./27/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./27/file1", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5980] <... write resumed>) = 524288 ./strace-static-x86_64: Process 5982 attached ./strace-static-x86_64: Process 5981 attached [pid 5980] munmap(0x7fd6d9800000, 138412032 [pid 5833] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5982] set_robust_list(0x555557df1660, 24 [pid 5981] set_robust_list(0x555557df1660, 24 [pid 5980] <... munmap resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5982 [pid 5982] <... set_robust_list resumed>) = 0 [pid 5981] <... set_robust_list resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5981 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5982] chdir("./28" [pid 5981] chdir("./29" [pid 5982] <... chdir resumed>) = 0 [pid 5981] <... chdir resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... openat resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5980] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5982] <... prctl resumed>) = 0 [pid 5981] <... prctl resumed>) = 0 [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... openat resumed>) = 4 [pid 5982] setpgid(0, 0 [pid 5981] setpgid(0, 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] <... setpgid resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5833] getdents64(4, [pid 5981] <... setpgid resumed>) = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5830] getdents64(4, [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5982] <... openat resumed>) = 3 [pid 5981] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5833] rmdir("./27/file1" [pid 5982] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5981] write(3, "1000", 4 [pid 5982] <... write resumed>) = 4 [pid 5981] <... write resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] close(4 [pid 5982] close(3 [pid 5981] close(3) = 0 [pid 5981] symlink("/dev/binderfs", "./binderfs"executing program [pid 5982] <... close resumed>) = 0 [pid 5981] <... symlink resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs" [pid 5981] write(1, "executing program\n", 18 [pid 5833] getdents64(3, [pid 5830] rmdir("./27/file1" [pid 5982] <... symlink resumed>) = 0 [pid 5981] <... write resumed>) = 18 executing program [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5982] write(1, "executing program\n", 18 [pid 5981] memfd_create("syzkaller", 0 [pid 5833] close(3 [pid 5830] <... rmdir resumed>) = 0 [pid 5982] <... write resumed>) = 18 [pid 5981] <... memfd_create resumed>) = 3 [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5982] memfd_create("syzkaller", 0 [pid 5980] <... ioctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 5982] <... memfd_create resumed>) = 3 [pid 5833] rmdir("./27" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5980] close(3 [pid 5830] close(3 [pid 5980] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5982] <... mmap resumed>) = 0x7fd6d9800000 [pid 5980] close(4 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] rmdir("./27" [pid 5981] <... write resumed>) = 524288 [pid 5980] <... close resumed>) = 0 [pid 5981] munmap(0x7fd6d9800000, 138412032 [pid 5980] mkdir("./file1", 0777 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] mkdir("./28", 0777 [pid 5982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5981] <... munmap resumed>) = 0 [pid 5980] <... mkdir resumed>) = 0 [ 69.088317][ T5980] loop2: detected capacity change from 0 to 1024 [pid 5830] mkdir("./28", 0777 [pid 5981] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5982] <... write resumed>) = 524288 [pid 5980] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5982] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5981] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5981] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5982] <... openat resumed>) = 4 [pid 5980] <... mount resumed>) = 0 [pid 5982] ioctl(4, LOOP_SET_FD, 3 [pid 5980] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5981] <... ioctl resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5981] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5981] <... close resumed>) = 0 [pid 5833] close(3 [pid 5830] close(3 [pid 5981] close(4 [pid 5980] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5981] <... close resumed>) = 0 [pid 5981] mkdir("./file1", 0777) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5983 attached [pid 5981] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5984 attached [pid 5980] chdir("./file1") = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5983] set_robust_list(0x555557df1660, 24 [pid 5980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5983] <... set_robust_list resumed>) = 0 [pid 5984] set_robust_list(0x555557df1660, 24 [pid 5983] chdir("./28" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5983 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5984 [pid 5984] chdir("./28" [pid 5980] chdir("./file0" [pid 5984] <... chdir resumed>) = 0 [pid 5983] <... chdir resumed>) = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5984] <... prctl resumed>) = 0 [pid 5983] <... prctl resumed>) = 0 [pid 5984] setpgid(0, 0 [pid 5983] setpgid(0, 0 [pid 5984] <... setpgid resumed>) = 0 [pid 5983] <... setpgid resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5981] <... mount resumed>) = 0 [pid 5981] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5984] <... openat resumed>) = 3 [pid 5981] <... openat resumed>) = 3 [pid 5980] <... chdir resumed>) = 0 [pid 5981] chdir("./file1" [pid 5980] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5984] write(3, "1000", 4 [pid 5983] <... openat resumed>) = 3 [pid 5981] <... chdir resumed>) = 0 [pid 5984] <... write resumed>) = 4 [pid 5983] write(3, "1000", 4 [pid 5981] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5984] close(3 [pid 5983] <... write resumed>) = 4 [pid 5981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5984] <... close resumed>) = 0 [pid 5983] close(3 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5983] <... close resumed>) = 0 [pid 5981] chdir("./file0" [pid 5984] <... symlink resumed>) = 0 [pid 5980] <... openat resumed>) = 4 [pid 5983] symlink("/dev/binderfs", "./binderfs" [pid 5982] <... ioctl resumed>) = 0 [pid 5984] write(1, "executing program\n", 18 [pid 5983] <... symlink resumed>) = 0 [pid 5981] <... chdir resumed>) = 0 executing program [pid 5982] close(3 [pid 5984] <... write resumed>) = 18 [pid 5983] write(1, "executing program\n", 18 [pid 5981] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000executing program [pid 5984] memfd_create("syzkaller", 0 [pid 5983] <... write resumed>) = 18 [pid 5982] <... close resumed>) = 0 [pid 5981] <... openat resumed>) = 4 [pid 5980] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5982] close(4 [pid 5984] <... memfd_create resumed>) = 3 [pid 5983] memfd_create("syzkaller", 0 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5982] <... close resumed>) = 0 [pid 5984] <... mmap resumed>) = 0x7fd6d9800000 [pid 5983] <... memfd_create resumed>) = 3 [pid 5982] mkdir("./file1", 0777 [pid 5981] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5982] <... mkdir resumed>) = 0 [pid 5982] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5981] <... creat resumed>) = 5 [pid 5980] <... creat resumed>) = 5 [pid 5982] <... mount resumed>) = 0 [pid 5981] sync( [ 69.154996][ T5981] loop3: detected capacity change from 0 to 1024 [ 69.159225][ T5982] loop0: detected capacity change from 0 to 1024 [pid 5980] sync( [pid 5982] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5983] <... mmap resumed>) = 0x7fd6d9800000 [pid 5982] <... openat resumed>) = 3 [pid 5984] <... write resumed>) = 524288 [pid 5982] chdir("./file1") = 0 [pid 5982] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5984] munmap(0x7fd6d9800000, 138412032 [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5981] <... sync resumed>) = 0 [pid 5980] <... sync resumed>) = 0 [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5982] chdir("./file0" [pid 5984] <... munmap resumed>) = 0 [pid 5981] exit_group(0 [pid 5980] exit_group(0) = ? [pid 5980] +++ exited with 0 +++ [pid 5981] <... exit_group resumed>) = ? [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5982] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... write resumed>) = 524288 [pid 5982] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5981] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 3 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5984] <... openat resumed>) = 4 [pid 5983] munmap(0x7fd6d9800000, 138412032 [pid 5982] <... openat resumed>) = 4 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5984] ioctl(4, LOOP_SET_FD, 3 [pid 5982] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5983] <... munmap resumed>) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] <... ioctl resumed>) = 0 [pid 5982] <... creat resumed>) = 5 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] close(3 [pid 5983] <... openat resumed>) = 4 [pid 5832] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5982] sync( [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5984] <... close resumed>) = 0 [pid 5831] unlink("./28/binderfs" [pid 5984] close(4) = 0 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5832] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... unlink resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] mkdir("./file1", 0777 [pid 5832] newfstatat(3, "", [pid 5982] <... sync resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] exit_group(0) = ? [pid 5832] getdents64(3, [pid 5984] <... mkdir resumed>) = 0 [pid 5984] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5832] unlink("./29/binderfs") = 0 [pid 5984] <... mount resumed>) = 0 [pid 5984] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] chdir("./file1") = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5982] +++ exited with 0 +++ [pid 5832] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5984] chdir("./file0" [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5984] <... chdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5983] <... ioctl resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5983] close(3 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5983] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 5983] close(4) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5829] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5983] mkdir("./file1", 0777 [pid 5831] rmdir("./28/file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... openat resumed>) = 4 [pid 5983] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5984] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] getdents64(3, [pid 5829] <... openat resumed>) = 3 [pid 5984] <... creat resumed>) = 5 [pid 5983] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] newfstatat(3, "", [pid 5984] sync( [pid 5831] close(3) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./28" [pid 5829] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./29/file1", [pid 5829] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./29", 0777 [pid 5829] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] unlink("./28/binderfs" [pid 5832] <... openat resumed>) = 4 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5829] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5983] <... mount resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] getdents64(4, [pid 5983] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5983] chdir("./file1") = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... close resumed>) = 0 [pid 5983] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5832] close(4 [pid 5983] chdir("./file0" [pid 5832] <... close resumed>) = 0 [ 69.261266][ T5984] loop4: detected capacity change from 0 to 1024 [ 69.281288][ T5983] loop1: detected capacity change from 0 to 1024 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] <... sync resumed>) = 0 [pid 5983] <... chdir resumed>) = 0 [pid 5832] rmdir("./29/file1" [pid 5829] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5985 attached [pid 5829] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5985 [pid 5829] newfstatat(AT_FDCWD, "./28/file1", [pid 5985] set_robust_list(0x555557df1660, 24 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5984] exit_group(0 [pid 5983] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] getdents64(3, [pid 5829] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] <... exit_group resumed>) = ? [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5985] <... set_robust_list resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5985] chdir("./29" [pid 5829] <... openat resumed>) = 4 [pid 5985] <... chdir resumed>) = 0 [pid 5984] +++ exited with 0 +++ [pid 5983] <... openat resumed>) = 4 [pid 5832] close(3 [pid 5829] newfstatat(4, "", [pid 5983] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5829] getdents64(4, [pid 5832] rmdir("./29" [pid 5985] <... prctl resumed>) = 0 [pid 5983] <... creat resumed>) = 5 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5985] setpgid(0, 0 [pid 5983] sync( [pid 5832] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5985] <... setpgid resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] mkdir("./30", 0777 [pid 5829] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5985] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] rmdir("./28/file1" [pid 5985] write(3, "1000", 4 [pid 5829] <... rmdir resumed>) = 0 [pid 5985] <... write resumed>) = 4 [pid 5985] close(3 [pid 5833] newfstatat(3, "", [pid 5832] <... mkdir resumed>) = 0 [pid 5985] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5985] symlink("/dev/binderfs", "./binderfs" [pid 5829] getdents64(3, [pid 5985] <... symlink resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5985] write(1, "executing program\n", 18 [pid 5829] <... close resumed>) = 0 executing program [pid 5985] <... write resumed>) = 18 [pid 5829] rmdir("./28" [pid 5985] memfd_create("syzkaller", 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5985] <... memfd_create resumed>) = 3 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5983] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] mkdir("./29", 0777 [pid 5983] exit_group(0 [pid 5833] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... ioctl resumed>) = 0 [pid 5983] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(3 [pid 5983] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5832] <... close resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5986 attached [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] unlink("./28/binderfs" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] set_robust_list(0x555557df1660, 24 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5986 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5986] <... set_robust_list resumed>) = 0 [pid 5833] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5986] chdir("./30" [pid 5830] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... ioctl resumed>) = 0 [pid 5986] <... chdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5986] setpgid(0, 0) = 0 [pid 5985] <... write resumed>) = 524288 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5829] close(3 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5986] <... openat resumed>) = 3 [pid 5833] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5986] write(3, "1000", 4 [pid 5985] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5986] <... write resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5986] close(3 [pid 5830] getdents64(3, [pid 5833] <... openat resumed>) = 4 [pid 5986] <... close resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5986] symlink("/dev/binderfs", "./binderfs" [pid 5985] <... munmap resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5986] <... symlink resumed>) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] getdents64(4, [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5987 [pid 5985] <... openat resumed>) = 4 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5986] write(1, "executing program\n", 18./strace-static-x86_64: Process 5987 attached executing program [pid 5987] set_robust_list(0x555557df1660, 24 [pid 5986] <... write resumed>) = 18 [pid 5985] <... ioctl resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5987] <... set_robust_list resumed>) = 0 [pid 5986] memfd_create("syzkaller", 0 [pid 5830] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5986] <... memfd_create resumed>) = 3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] unlink("./28/binderfs" [pid 5986] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5987] chdir("./29" [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./28/file1" [pid 5987] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5987] setpgid(0, 0) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./28") = 0 [pid 5833] mkdir("./29", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 5987] <... openat resumed>) = 3 [pid 5987] write(3, "1000", 4) = 4 [pid 5987] close(3 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5987] <... close resumed>) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] <... umount2 resumed>) = 0 executing program [pid 5987] write(1, "executing program\n", 18) = 18 [pid 5987] memfd_create("syzkaller", 0 [pid 5833] <... close resumed>) = 0 [pid 5987] <... memfd_create resumed>) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5988 attached [pid 5987] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./28/file1", [pid 5988] set_robust_list(0x555557df1660, 24 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5988] <... set_robust_list resumed>) = 0 [pid 5985] close(3 [pid 5830] umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5985] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5985] close(4 [pid 5830] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5988] chdir("./29" [pid 5986] <... write resumed>) = 524288 [pid 5985] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5985] mkdir("./file1", 0777 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5988 [pid 5830] newfstatat(4, "", [pid 5985] <... mkdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5986] munmap(0x7fd6d9800000, 138412032 [pid 5985] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] getdents64(4, [pid 5988] <... chdir resumed>) = 0 [pid 5986] <... munmap resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5988] <... prctl resumed>) = 0 [pid 5830] close(4 [pid 5988] setpgid(0, 0 [pid 5830] <... close resumed>) = 0 [pid 5988] <... setpgid resumed>) = 0 [pid 5830] rmdir("./28/file1" [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... rmdir resumed>) = 0 [ 69.435266][ T5985] loop2: detected capacity change from 0 to 1024 [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5986] <... openat resumed>) = 4 [pid 5830] close(3 [pid 5986] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./28") = 0 [pid 5988] <... openat resumed>) = 3 [pid 5987] <... write resumed>) = 524288 [pid 5830] mkdir("./29", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5988] write(3, "1000", 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5988] <... write resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 5985] <... mount resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5985] chdir("./file1") = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5989 attached [pid 5988] close(3 [pid 5987] munmap(0x7fd6d9800000, 138412032 [pid 5986] <... ioctl resumed>) = 0 [pid 5985] chdir("./file0" [pid 5988] <... close resumed>) = 0 [pid 5987] <... munmap resumed>) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs" [pid 5989] set_robust_list(0x555557df1660, 24 [pid 5988] <... symlink resumed>) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5985] <... chdir resumed>) = 0 [pid 5989] <... set_robust_list resumed>) = 0 executing program [pid 5988] write(1, "executing program\n", 18 [pid 5987] <... openat resumed>) = 4 [pid 5986] close(3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5989 [pid 5989] chdir("./29" [pid 5988] <... write resumed>) = 18 [pid 5987] ioctl(4, LOOP_SET_FD, 3 [pid 5986] <... close resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5986] close(4 [pid 5989] <... chdir resumed>) = 0 [pid 5986] <... close resumed>) = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0 [pid 5986] mkdir("./file1", 0777) = 0 [pid 5985] <... openat resumed>) = 4 [pid 5989] <... setpgid resumed>) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5986] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5985] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] write(1, "executing program\n", 18 [pid 5988] memfd_create("syzkaller", 0 [pid 5987] <... ioctl resumed>) = 0 [pid 5986] <... mount resumed>) = 0 [pid 5985] <... creat resumed>) = 5 executing program [pid 5989] <... write resumed>) = 18 [pid 5988] <... memfd_create resumed>) = 3 [pid 5987] close(3 [pid 5986] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] <... close resumed>) = 0 [pid 5986] <... openat resumed>) = 3 [pid 5985] sync( [pid 5988] <... mmap resumed>) = 0x7fd6d9800000 [pid 5987] close(4 [pid 5986] chdir("./file1" [pid 5989] memfd_create("syzkaller", 0 [pid 5987] <... close resumed>) = 0 [pid 5986] <... chdir resumed>) = 0 [pid 5987] mkdir("./file1", 0777 [pid 5986] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5989] <... memfd_create resumed>) = 3 [pid 5987] <... mkdir resumed>) = 0 [pid 5986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5986] chdir("./file0" [pid 5987] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5989] <... mmap resumed>) = 0x7fd6d9800000 [pid 5986] <... chdir resumed>) = 0 [pid 5986] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [ 69.494132][ T5986] loop3: detected capacity change from 0 to 1024 [ 69.527343][ T5987] loop0: detected capacity change from 0 to 1024 [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5986] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] <... write resumed>) = 524288 [pid 5987] <... mount resumed>) = 0 [pid 5985] <... sync resumed>) = 0 [pid 5987] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5987] chdir("./file1" [pid 5989] <... write resumed>) = 524288 [pid 5988] munmap(0x7fd6d9800000, 138412032 [pid 5987] <... chdir resumed>) = 0 [pid 5986] <... creat resumed>) = 5 [pid 5985] exit_group(0 [pid 5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5986] sync( [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5985] <... exit_group resumed>) = ? [pid 5987] chdir("./file0" [pid 5985] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5989] munmap(0x7fd6d9800000, 138412032 [pid 5988] <... munmap resumed>) = 0 [pid 5987] <... chdir resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5989] <... munmap resumed>) = 0 [pid 5987] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5988] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5987] <... openat resumed>) = 4 [pid 5989] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5988] <... openat resumed>) = 4 [pid 5831] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5988] ioctl(4, LOOP_SET_FD, 3 [pid 5831] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5989] <... openat resumed>) = 4 [pid 5988] <... ioctl resumed>) = 0 [pid 5987] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... openat resumed>) = 3 [pid 5989] ioctl(4, LOOP_SET_FD, 3 [pid 5831] newfstatat(3, "", [pid 5987] <... creat resumed>) = 5 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5987] sync( [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./29/binderfs") = 0 [pid 5988] close(3 [pid 5831] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5989] <... ioctl resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5988] close(4 [pid 5831] <... umount2 resumed>) = 0 [pid 5989] close(3 [pid 5988] <... close resumed>) = 0 [pid 5987] <... sync resumed>) = 0 [pid 5986] <... sync resumed>) = 0 [pid 5989] <... close resumed>) = 0 [pid 5988] mkdir("./file1", 0777 [pid 5989] close(4) = 0 [pid 5988] <... mkdir resumed>) = 0 [pid 5987] exit_group(0 [pid 5986] exit_group(0 [pid 5831] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5986] <... exit_group resumed>) = ? [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5989] mkdir("./file1", 0777 [pid 5987] <... exit_group resumed>) = ? [pid 5831] newfstatat(AT_FDCWD, "./29/file1", [pid 5989] <... mkdir resumed>) = 0 [pid 5986] +++ exited with 0 +++ [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5987] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5989] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5988] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] getdents64(4, [pid 5829] <... restart_syscall resumed>) = 0 [ 69.602938][ T5988] loop4: detected capacity change from 0 to 1024 [ 69.610728][ T5989] loop1: detected capacity change from 0 to 1024 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5988] <... mount resumed>) = 0 [pid 5832] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./29/file1" [pid 5829] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5988] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5988] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(3, [pid 5989] <... mount resumed>) = 0 [pid 5988] chdir("./file1" [pid 5832] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 5989] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5988] <... chdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5989] <... openat resumed>) = 3 [pid 5988] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] close(3 [pid 5829] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5989] chdir("./file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5989] <... chdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5989] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5988] chdir("./file0" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] rmdir("./29" [pid 5989] chdir("./file0" [pid 5829] unlink("./29/binderfs" [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5831] mkdir("./30", 0777 [pid 5829] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5989] <... chdir resumed>) = 0 [pid 5832] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5988] <... chdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5988] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5989] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5988] <... openat resumed>) = 4 [pid 5832] unlink("./30/binderfs" [pid 5831] <... openat resumed>) = 3 [pid 5989] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5829] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5989] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5988] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... ioctl resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./29/file1", [pid 5831] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5988] <... creat resumed>) = 5 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./29/file1" [pid 5989] <... creat resumed>) = 5 [pid 5988] sync( [pid 5832] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... rmdir resumed>) = 0 [pid 5989] sync( [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./30/file1", [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 ./strace-static-x86_64: Process 5990 attached [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] rmdir("./29" [pid 5832] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... rmdir resumed>) = 0 [pid 5990] set_robust_list(0x555557df1660, 24 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5990 [pid 5832] newfstatat(4, "", [pid 5990] <... set_robust_list resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] mkdir("./30", 0777 [pid 5832] getdents64(4, [pid 5990] chdir("./30") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5990] <... setpgid resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] close(4 [pid 5829] <... openat resumed>) = 3 [pid 5990] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5990] write(3, "1000", 4 [pid 5832] rmdir("./30/file1" [pid 5829] <... ioctl resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5829] close(3 [pid 5990] <... write resumed>) = 4 [pid 5989] <... sync resumed>) = 0 [pid 5988] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5990] close(3 [pid 5989] exit_group(0 [pid 5988] exit_group(0 [pid 5832] close(3 [pid 5990] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5990] symlink("/dev/binderfs", "./binderfs" [pid 5989] <... exit_group resumed>) = ? [pid 5988] <... exit_group resumed>) = ? [pid 5832] rmdir("./30"./strace-static-x86_64: Process 5991 attached [pid 5990] <... symlink resumed>) = 0 [pid 5988] +++ exited with 0 +++ [pid 5832] <... rmdir resumed>) = 0 [pid 5990] write(1, "executing program\n", 18executing program ) = 18 [pid 5990] memfd_create("syzkaller", 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5991] set_robust_list(0x555557df1660, 24 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5991] <... set_robust_list resumed>) = 0 [pid 5990] <... memfd_create resumed>) = 3 [pid 5832] mkdir("./31", 0777 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5991 [pid 5991] chdir("./30" [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5990] <... mmap resumed>) = 0x7fd6d9800000 [pid 5989] +++ exited with 0 +++ [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5991] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5991] <... prctl resumed>) = 0 [pid 5833] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... ioctl resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5832] close(3 [pid 5991] setpgid(0, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5991] <... setpgid resumed>) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5991] <... openat resumed>) = 3 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... openat resumed>) = 3 [pid 5991] write(3, "1000", 4 [pid 5833] newfstatat(3, "", [pid 5830] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 5830] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5992 attached [pid 5991] <... write resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 5992] set_robust_list(0x555557df1660, 24 [pid 5991] close(3 [pid 5990] <... write resumed>) = 524288 [pid 5833] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5991] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs" [pid 5830] getdents64(3, [pid 5992] <... set_robust_list resumed>) = 0 [pid 5991] <... symlink resumed>) = 0 [pid 5833] unlink("./29/binderfs" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5992 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5992] chdir("./31" [pid 5991] write(1, "executing program\n", 18 [pid 5990] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... unlink resumed>) = 0 [pid 5830] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5991] <... write resumed>) = 18 [pid 5833] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] <... chdir resumed>) = 0 [pid 5991] memfd_create("syzkaller", 0 [pid 5990] <... munmap resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5991] <... memfd_create resumed>) = 3 [pid 5990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5992] <... prctl resumed>) = 0 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5992] setpgid(0, 0 [pid 5991] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] unlink("./29/binderfs" [pid 5992] <... setpgid resumed>) = 0 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... unlink resumed>) = 0 [pid 5990] <... ioctl resumed>) = 0 [pid 5992] <... openat resumed>) = 3 [pid 5990] close(3 [pid 5830] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5992] write(3, "1000", 4 [pid 5833] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5990] <... close resumed>) = 0 [pid 5992] <... write resumed>) = 4 [pid 5990] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] close(3 [pid 5833] newfstatat(AT_FDCWD, "./29/file1", [pid 5992] <... close resumed>) = 0 [pid 5990] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5990] mkdir("./file1", 0777 [pid 5992] <... symlink resumed>) = 0 executing program [pid 5992] write(1, "executing program\n", 18 [pid 5833] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5992] <... write resumed>) = 18 [pid 5991] <... write resumed>) = 524288 [pid 5990] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = 0 [pid 5992] memfd_create("syzkaller", 0 [pid 5991] munmap(0x7fd6d9800000, 138412032 [pid 5833] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5992] <... memfd_create resumed>) = 3 [pid 5991] <... munmap resumed>) = 0 [pid 5990] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... openat resumed>) = 4 [pid 5830] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] <... mmap resumed>) = 0x7fd6d9800000 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5991] <... openat resumed>) = 4 [pid 5830] newfstatat(AT_FDCWD, "./29/file1", [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5990] <... mount resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5990] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5990] <... openat resumed>) = 3 [pid 5833] close(4) = 0 [pid 5833] rmdir("./29/file1" [pid 5830] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5990] chdir("./file1" [pid 5833] close(3 [pid 5830] rmdir("./29/file1" [pid 5990] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] rmdir("./29" [pid 5990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... rmdir resumed>) = 0 [pid 5990] chdir("./file0" [pid 5833] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] mkdir("./30", 0777 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./29" [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./30", 0777 [pid 5991] <... ioctl resumed>) = 0 [pid 5990] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... mkdir resumed>) = 0 [pid 5991] close(3 [pid 5990] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... openat resumed>) = 3 [pid 5991] <... close resumed>) = 0 [pid 5991] close(4) = 0 [pid 5991] mkdir("./file1", 0777 [pid 5990] <... openat resumed>) = 4 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5991] <... mkdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5991] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5992] <... write resumed>) = 524288 [pid 5991] <... mount resumed>) = 0 [pid 5990] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... ioctl resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5992] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5991] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5991] chdir("./file1" [pid 5992] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5991] <... chdir resumed>) = 0 [pid 5992] <... openat resumed>) = 4 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 69.786078][ T5990] loop2: detected capacity change from 0 to 1024 [ 69.808781][ T5991] loop0: detected capacity change from 0 to 1024 [pid 5991] chdir("./file0" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5992] <... ioctl resumed>) = 0 [pid 5991] <... chdir resumed>) = 0 [pid 5990] <... creat resumed>) = 5 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5991] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 ./strace-static-x86_64: Process 5993 attached [pid 5990] sync( [pid 5991] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5993] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5993 ./strace-static-x86_64: Process 5994 attached [pid 5993] <... set_robust_list resumed>) = 0 [pid 5992] close(3 [pid 5994] set_robust_list(0x555557df1660, 24 [pid 5993] chdir("./30" [pid 5992] <... close resumed>) = 0 [pid 5993] <... chdir resumed>) = 0 [pid 5994] <... set_robust_list resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5992] close(4 [pid 5994] chdir("./30" [pid 5993] <... prctl resumed>) = 0 [pid 5992] <... close resumed>) = 0 [pid 5994] <... chdir resumed>) = 0 [pid 5993] setpgid(0, 0 [pid 5992] mkdir("./file1", 0777 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5993] <... setpgid resumed>) = 0 [pid 5992] <... mkdir resumed>) = 0 [pid 5994] <... prctl resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5992] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5994 [pid 5994] setpgid(0, 0 [pid 5993] <... openat resumed>) = 3 [pid 5994] <... setpgid resumed>) = 0 [pid 5993] write(3, "1000", 4 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5993] <... write resumed>) = 4 [pid 5994] <... openat resumed>) = 3 [pid 5993] close(3 [pid 5991] <... creat resumed>) = 5 [pid 5994] write(3, "1000", 4 [pid 5993] <... close resumed>) = 0 [pid 5994] <... write resumed>) = 4 [pid 5993] symlink("/dev/binderfs", "./binderfs" [pid 5991] sync( [pid 5994] close(3) = 0 [pid 5993] <... symlink resumed>) = 0 executing program [pid 5994] symlink("/dev/binderfs", "./binderfs" [pid 5993] write(1, "executing program\n", 18 [pid 5994] <... symlink resumed>) = 0 [pid 5993] <... write resumed>) = 18 executing program [pid 5994] write(1, "executing program\n", 18 [pid 5993] memfd_create("syzkaller", 0 [pid 5992] <... mount resumed>) = 0 [pid 5994] <... write resumed>) = 18 [pid 5994] memfd_create("syzkaller", 0 [pid 5993] <... memfd_create resumed>) = 3 [pid 5992] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5992] chdir("./file1" [pid 5994] <... memfd_create resumed>) = 3 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5992] <... chdir resumed>) = 0 [pid 5994] <... mmap resumed>) = 0x7fd6d9800000 [pid 5992] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5993] <... mmap resumed>) = 0x7fd6d9800000 [pid 5992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5992] chdir("./file0") = 0 [ 69.850726][ T5992] loop3: detected capacity change from 0 to 1024 [pid 5992] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5992] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5991] <... sync resumed>) = 0 [pid 5990] <... sync resumed>) = 0 [pid 5991] exit_group(0 [pid 5990] exit_group(0 [pid 5991] <... exit_group resumed>) = ? [pid 5994] <... write resumed>) = 524288 [pid 5993] <... write resumed>) = 524288 [pid 5990] <... exit_group resumed>) = ? [pid 5991] +++ exited with 0 +++ [pid 5990] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5992] <... creat resumed>) = 5 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5992] sync( [pid 5993] munmap(0x7fd6d9800000, 138412032 [pid 5994] munmap(0x7fd6d9800000, 138412032 [pid 5992] <... sync resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5994] <... munmap resumed>) = 0 [pid 5831] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] <... munmap resumed>) = 0 [pid 5992] exit_group(0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5992] <... exit_group resumed>) = ? [pid 5831] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5993] <... openat resumed>) = 4 [pid 5992] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5994] <... openat resumed>) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] newfstatat(3, "", [pid 5829] <... openat resumed>) = 3 [pid 5994] ioctl(4, LOOP_SET_FD, 3 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5993] <... ioctl resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(3, "", [pid 5993] close(3 [pid 5831] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5993] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] getdents64(3, [pid 5993] close(4 [pid 5832] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5993] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] mkdir("./file1", 0777 [pid 5832] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5832] newfstatat(3, "", [pid 5831] unlink("./30/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5993] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] unlink("./30/binderfs" [pid 5994] <... ioctl resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5994] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5994] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5832] unlink("./31/binderfs" [pid 5829] <... umount2 resumed>) = 0 [pid 5994] mkdir("./file1", 0777 [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./30/file1", [pid 5829] newfstatat(AT_FDCWD, "./30/file1", [pid 5993] <... mount resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5993] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] chdir("./file1" [pid 5831] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] <... chdir resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 5993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] newfstatat(4, "", [pid 5829] newfstatat(4, "", [pid 5994] <... mkdir resumed>) = 0 [pid 5993] chdir("./file0" [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5994] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] getdents64(4, [pid 5832] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5993] <... chdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./31/file1", [pid 5831] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5994] <... mount resumed>) = 0 [pid 5993] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5994] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5993] <... openat resumed>) = 4 [pid 5832] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5994] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5829] close(4 [pid 5994] chdir("./file1" [pid 5993] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] rmdir("./30/file1" [pid 5829] <... close resumed>) = 0 [pid 5994] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] rmdir("./30/file1" [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 69.957358][ T5993] loop4: detected capacity change from 0 to 1024 [ 69.959957][ T5994] loop1: detected capacity change from 0 to 1024 [pid 5832] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5994] chdir("./file0" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5829] close(3 [pid 5832] getdents64(4, [pid 5993] <... creat resumed>) = 5 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5994] <... chdir resumed>) = 0 [pid 5831] close(3 [pid 5829] rmdir("./30" [pid 5994] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5993] sync( [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... close resumed>) = 0 [pid 5994] <... openat resumed>) = 4 [pid 5832] getdents64(4, [pid 5831] rmdir("./30" [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5832] rmdir("./31/file1" [pid 5829] mkdir("./31", 0777 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] mkdir("./31", 0777) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5994] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 5832] close(3 [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5994] <... creat resumed>) = 5 [pid 5832] rmdir("./31" [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5994] sync( [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 5995 ./strace-static-x86_64: Process 5995 attached [pid 5993] <... sync resumed>) = 0 [pid 5832] mkdir("./32", 0777 [pid 5829] <... close resumed>) = 0 [pid 5993] exit_group(0) = ? [pid 5832] <... mkdir resumed>) = 0 [pid 5995] set_robust_list(0x555557df1660, 24 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5994] <... sync resumed>) = 0 [pid 5993] +++ exited with 0 +++ [pid 5832] <... openat resumed>) = 3 [pid 5994] exit_group(0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 5996 [pid 5994] <... exit_group resumed>) = ? [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5996 attached [pid 5995] <... set_robust_list resumed>) = 0 [pid 5995] chdir("./31" [pid 5996] set_robust_list(0x555557df1660, 24 [pid 5995] <... chdir resumed>) = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5994] +++ exited with 0 +++ [pid 5996] <... set_robust_list resumed>) = 0 [pid 5832] close(3 [pid 5996] chdir("./31" [pid 5995] setpgid(0, 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5996] <... chdir resumed>) = 0 [pid 5995] <... setpgid resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... restart_syscall resumed>) = 0 [pid 5996] <... prctl resumed>) = 0 [pid 5995] <... openat resumed>) = 3 [pid 5833] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5996] setpgid(0, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5996] <... setpgid resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] write(3, "1000", 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5995] <... write resumed>) = 4 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 5997 [pid 5830] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5997 attached [pid 5996] <... openat resumed>) = 3 [pid 5995] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5997] set_robust_list(0x555557df1660, 24 [pid 5996] write(3, "1000", 4 [pid 5995] <... close resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5830] <... openat resumed>) = 3 [pid 5997] <... set_robust_list resumed>) = 0 [pid 5996] <... write resumed>) = 4 [pid 5995] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] newfstatat(3, "", executing program [pid 5997] chdir("./32" [pid 5996] close(3 [pid 5995] <... symlink resumed>) = 0 [pid 5833] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5997] <... chdir resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5995] write(1, "executing program\n", 18 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5996] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5995] <... write resumed>) = 18 [pid 5830] getdents64(3, [pid 5997] <... prctl resumed>) = 0 [pid 5997] setpgid(0, 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5997] <... setpgid resumed>) = 0 [pid 5995] memfd_create("syzkaller", 0 [pid 5830] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5996] <... symlink resumed>) = 0 [pid 5995] <... memfd_create resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5996] write(1, "executing program\n", 18 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] unlink("./30/binderfs" [pid 5995] <... mmap resumed>) = 0x7fd6d9800000 executing program [pid 5997] <... openat resumed>) = 3 [pid 5996] <... write resumed>) = 18 [pid 5830] <... unlink resumed>) = 0 [pid 5996] memfd_create("syzkaller", 0 [pid 5830] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5997] write(3, "1000", 4 [pid 5996] <... memfd_create resumed>) = 3 [pid 5997] <... write resumed>) = 4 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5997] close(3) = 0 [pid 5996] <... mmap resumed>) = 0x7fd6d9800000 [pid 5997] symlink("/dev/binderfs", "./binderfs" [pid 5833] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5830] <... umount2 resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] <... symlink resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5997] write(1, "executing program\n", 18 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5997] <... write resumed>) = 18 [pid 5833] unlink("./30/binderfs" [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... unlink resumed>) = 0 [pid 5997] memfd_create("syzkaller", 0 [pid 5830] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5997] <... memfd_create resumed>) = 3 [pid 5833] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5997] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5995] <... write resumed>) = 524288 [pid 5830] getdents64(4, [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5995] munmap(0x7fd6d9800000, 138412032 [pid 5996] <... write resumed>) = 524288 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] rmdir("./30/file1" [pid 5833] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./30/file1", [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5995] <... munmap resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] close(3 [pid 5833] umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5996] munmap(0x7fd6d9800000, 138412032 [pid 5995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5996] <... munmap resumed>) = 0 [pid 5995] <... openat resumed>) = 4 [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5997] <... write resumed>) = 524288 [pid 5996] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./30" [pid 5833] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5996] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5830] <... rmdir resumed>) = 0 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] mkdir("./31", 0777 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... mkdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5997] munmap(0x7fd6d9800000, 138412032 [pid 5995] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5997] <... munmap resumed>) = 0 [pid 5995] close(3) = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5995] close(4 [pid 5997] <... openat resumed>) = 4 [pid 5995] <... close resumed>) = 0 [pid 5833] close(4 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5995] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5995] <... mkdir resumed>) = 0 [pid 5833] rmdir("./30/file1" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... rmdir resumed>) = 0 [pid 5997] ioctl(4, LOOP_SET_FD, 3 [pid 5995] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] getdents64(3, [pid 5830] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5996] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5997] <... ioctl resumed>) = 0 [pid 5996] close(3 [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5833] rmdir("./30" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5996] close(4 [pid 5833] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5998 attached [pid 5996] <... close resumed>) = 0 [pid 5995] <... mount resumed>) = 0 [pid 5833] mkdir("./31", 0777 [pid 5995] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5996] mkdir("./file1", 0777 [pid 5995] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5998] set_robust_list(0x555557df1660, 24 [pid 5995] chdir("./file1") = 0 [pid 5998] <... set_robust_list resumed>) = 0 [pid 5996] <... mkdir resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 5998 [pid 5998] chdir("./31" [pid 5996] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5998] <... chdir resumed>) = 0 [pid 5995] chdir("./file0" [pid 5833] <... openat resumed>) = 3 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] <... chdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5998] setpgid(0, 0 [pid 5997] close(3 [pid 5995] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5998] <... setpgid resumed>) = 0 [pid 5997] <... close resumed>) = 0 [pid 5996] <... mount resumed>) = 0 [pid 5995] <... openat resumed>) = 4 [pid 5833] <... ioctl resumed>) = 0 [pid 5996] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] close(3 [pid 5997] close(4 [pid 5995] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5997] <... close resumed>) = 0 [pid 5996] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5997] mkdir("./file1", 0777 [pid 5998] <... openat resumed>) = 3 [pid 5997] <... mkdir resumed>) = 0 [pid 5996] chdir("./file1" [pid 5998] write(3, "1000", 4) = 4 [pid 5996] <... chdir resumed>) = 0 [pid 5995] <... creat resumed>) = 5 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5998] close(3 [pid 5996] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5998] <... close resumed>) = 0 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5998] symlink("/dev/binderfs", "./binderfs" [pid 5997] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5998] <... symlink resumed>) = 0 [pid 5995] sync(executing program [pid 5998] write(1, "executing program\n", 18 [pid 5996] chdir("./file0"./strace-static-x86_64: Process 5999 attached [pid 5998] <... write resumed>) = 18 [pid 5999] set_robust_list(0x555557df1660, 24 [pid 5998] memfd_create("syzkaller", 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 5999 [pid 5998] <... memfd_create resumed>) = 3 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5999] chdir("./31" [pid 5998] <... mmap resumed>) = 0x7fd6d9800000 [pid 5996] <... chdir resumed>) = 0 [pid 5997] <... mount resumed>) = 0 [pid 5997] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 70.149193][ T5995] loop2: detected capacity change from 0 to 1024 [ 70.155925][ T5996] loop0: detected capacity change from 0 to 1024 [ 70.172999][ T5997] loop3: detected capacity change from 0 to 1024 [pid 5997] chdir("./file1") = 0 [pid 5999] <... chdir resumed>) = 0 [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5996] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5995] <... sync resumed>) = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5997] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5996] <... openat resumed>) = 4 [pid 5999] <... prctl resumed>) = 0 [pid 5997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5995] exit_group(0 [pid 5999] setpgid(0, 0) = 0 [pid 5997] chdir("./file0" [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5998] <... write resumed>) = 524288 [pid 5996] <... creat resumed>) = 5 [pid 5995] <... exit_group resumed>) = ? [pid 5999] <... openat resumed>) = 3 [pid 5998] munmap(0x7fd6d9800000, 138412032 [pid 5997] <... chdir resumed>) = 0 [pid 5996] sync( [pid 5995] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5997] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5997] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5999] write(3, "1000", 4 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5999] <... write resumed>) = 4 [pid 5998] <... munmap resumed>) = 0 [pid 5999] close(3) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5999] symlink("/dev/binderfs", "./binderfs" [pid 5831] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] <... symlink resumed>) = 0 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 5997] <... creat resumed>) = 5 [pid 5831] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5997] sync(executing program [pid 5999] write(1, "executing program\n", 18 [pid 5997] <... sync resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5999] <... write resumed>) = 18 [pid 5996] <... sync resumed>) = 0 [pid 5999] memfd_create("syzkaller", 0 [pid 5997] exit_group(0 [pid 5996] exit_group(0 [pid 5831] newfstatat(3, "", [pid 5996] <... exit_group resumed>) = ? [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5997] <... exit_group resumed>) = ? [pid 5999] <... memfd_create resumed>) = 3 [pid 5997] +++ exited with 0 +++ [pid 5996] +++ exited with 0 +++ [pid 5831] getdents64(3, [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5999] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 5829] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5829] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./32/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5831] unlink("./31/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5829] unlink("./31/binderfs" [pid 5998] <... ioctl resumed>) = 0 [pid 5831] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] close(3 [pid 5829] <... unlink resumed>) = 0 [pid 5998] <... close resumed>) = 0 [pid 5998] close(4 [pid 5829] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5998] mkdir("./file1", 0777) = 0 [pid 5998] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./31/file1", [pid 5999] <... write resumed>) = 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5999] munmap(0x7fd6d9800000, 138412032 [pid 5831] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5999] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5999] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... openat resumed>) = 4 [pid 5999] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5999] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 70.273462][ T5998] loop1: detected capacity change from 0 to 1024 [pid 5832] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./32/file1", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] newfstatat(AT_FDCWD, "./31/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(4, [pid 5832] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5831] close(4 [pid 5829] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5998] <... mount resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] rmdir("./31/file1" [pid 5829] newfstatat(4, "", [pid 5832] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5832] close(4 [pid 5998] <... openat resumed>) = 3 [pid 5998] chdir("./file1" [pid 5831] <... rmdir resumed>) = 0 [pid 5998] <... chdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] close(3 [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5998] chdir("./file0" [pid 5831] <... close resumed>) = 0 [pid 5999] <... ioctl resumed>) = 0 [pid 5998] <... chdir resumed>) = 0 [pid 5832] rmdir("./32/file1" [pid 5831] rmdir("./31" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5999] close(3 [pid 5998] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5999] <... close resumed>) = 0 [pid 5831] mkdir("./32", 0777 [pid 5999] close(4 [pid 5998] <... openat resumed>) = 4 [pid 5832] getdents64(3, [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5999] <... close resumed>) = 0 [pid 5829] close(4 [pid 5999] mkdir("./file1", 0777 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5999] <... mkdir resumed>) = 0 [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./32" [pid 5999] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5998] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] rmdir("./31/file1" [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5832] mkdir("./33", 0777 [pid 5831] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5832] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] rmdir("./31" [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 5998] <... creat resumed>) = 5 [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./32", 0777 [pid 5999] <... mount resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5999] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5998] sync( [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5999] <... openat resumed>) = 3 [pid 5999] chdir("./file1" [pid 5829] <... openat resumed>) = 3 [pid 5999] <... chdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5999] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... ioctl resumed>) = 0 [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5999] chdir("./file0" [pid 5829] close(3./strace-static-x86_64: Process 6000 attached [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached [ 70.331903][ T5999] loop4: detected capacity change from 0 to 1024 [pid 6000] set_robust_list(0x555557df1660, 24) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6000 [pid 6000] chdir("./32") = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6001] set_robust_list(0x555557df1660, 24 [pid 6000] <... prctl resumed>) = 0 [pid 6001] <... set_robust_list resumed>) = 0 [pid 6001] chdir("./33" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6001 [pid 6001] <... chdir resumed>) = 0 [pid 6000] setpgid(0, 0 [pid 5999] <... chdir resumed>) = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6000] <... setpgid resumed>) = 0 [pid 5999] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] <... close resumed>) = 0 [pid 6001] <... prctl resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6001] setpgid(0, 0 [pid 6000] <... openat resumed>) = 3 [pid 6000] write(3, "1000", 4) = 4 [pid 6000] close(3) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5999] <... openat resumed>) = 4 [pid 6001] <... setpgid resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5999] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000executing program [pid 6000] write(1, "executing program\n", 18) = 18 ./strace-static-x86_64: Process 6002 attached [pid 6001] <... openat resumed>) = 3 [pid 6000] memfd_create("syzkaller", 0 [pid 6002] set_robust_list(0x555557df1660, 24 [pid 6001] write(3, "1000", 4 [pid 6000] <... memfd_create resumed>) = 3 [pid 6002] <... set_robust_list resumed>) = 0 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6002] chdir("./32" [pid 6000] <... mmap resumed>) = 0x7fd6d9800000 [pid 6002] <... chdir resumed>) = 0 [pid 6001] <... write resumed>) = 4 [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6001] close(3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6002 [pid 6002] <... prctl resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6002] write(1, "executing program\n", 18) = 18 [pid 6002] memfd_create("syzkaller", 0) = 3 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6001] symlink("/dev/binderfs", "./binderfs" [pid 5999] <... creat resumed>) = 5 [pid 5999] sync( [pid 6001] <... symlink resumed>) = 0 executing program [pid 6001] write(1, "executing program\n", 18) = 18 [pid 5998] <... sync resumed>) = 0 [pid 6001] memfd_create("syzkaller", 0 [pid 5998] exit_group(0 [pid 6001] <... memfd_create resumed>) = 3 [pid 5998] <... exit_group resumed>) = ? [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6000] <... write resumed>) = 524288 [pid 6002] <... write resumed>) = 524288 [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5999] <... sync resumed>) = 0 [pid 5998] +++ exited with 0 +++ [pid 5999] exit_group(0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6002] munmap(0x7fd6d9800000, 138412032 [pid 6000] munmap(0x7fd6d9800000, 138412032 [pid 6002] <... munmap resumed>) = 0 [pid 6000] <... munmap resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6002] <... openat resumed>) = 4 [pid 6000] <... openat resumed>) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... exit_group resumed>) = ? [pid 5830] <... restart_syscall resumed>) = 0 [pid 6001] <... write resumed>) = 524288 [pid 6000] <... ioctl resumed>) = 0 [pid 5999] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6001] munmap(0x7fd6d9800000, 138412032 [pid 5830] newfstatat(3, "", [pid 5833] <... restart_syscall resumed>) = 0 [pid 6001] <... munmap resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] getdents64(3, [pid 6000] close(3 [pid 5830] newfstatat(AT_FDCWD, "./31/binderfs", [pid 6002] <... ioctl resumed>) = 0 [pid 6001] <... openat resumed>) = 4 [pid 6000] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 6000] close(4 [pid 5833] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./31/binderfs" [pid 6002] close(3) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6002] close(4) = 0 [pid 6002] mkdir("./file1", 0777 [pid 5830] <... unlink resumed>) = 0 [pid 6002] <... mkdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./31/binderfs", [pid 6002] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6001] <... ioctl resumed>) = 0 [pid 6000] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] mkdir("./file1", 0777 [pid 5833] unlink("./31/binderfs" [pid 6001] close(3 [pid 6000] <... mkdir resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 6000] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6001] close(4 [pid 5833] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6001] <... close resumed>) = 0 [pid 6001] mkdir("./file1", 0777) = 0 [pid 6001] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... umount2 resumed>) = 0 [pid 6001] <... mount resumed>) = 0 [pid 6000] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6001] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6000] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6001] <... openat resumed>) = 3 [pid 6000] <... openat resumed>) = 3 [pid 5833] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6001] chdir("./file1" [pid 6000] chdir("./file1" [pid 6002] <... mount resumed>) = 0 [pid 6001] <... chdir resumed>) = 0 [pid 6000] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./31/file1", [pid 5830] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6002] <... chdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./31/file1", [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] chdir("./file0" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6001] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6002] <... chdir resumed>) = 0 [pid 6001] chdir("./file0" [pid 6000] chdir("./file0" [pid 5833] umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 6002] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(4, "", [pid 6001] <... chdir resumed>) = 0 [pid 6000] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6002] <... openat resumed>) = 4 [pid 5830] getdents64(4, [ 70.463195][ T6000] loop2: detected capacity change from 0 to 1024 [ 70.472188][ T6002] loop0: detected capacity change from 0 to 1024 [ 70.500287][ T6001] loop3: detected capacity change from 0 to 1024 [pid 6002] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6001] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6000] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] newfstatat(4, "", [pid 6002] <... creat resumed>) = 5 [pid 6001] <... openat resumed>) = 4 [pid 6000] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6002] sync( [pid 6000] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] getdents64(4, [pid 5830] close(4 [pid 6001] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... close resumed>) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./31/file1" [pid 5833] close(4 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5833] rmdir("./31/file1" [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./31" [pid 6001] <... creat resumed>) = 5 [pid 6000] <... creat resumed>) = 5 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6001] sync( [pid 5830] mkdir("./32", 0777 [pid 6000] sync( [pid 5833] getdents64(3, [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] rmdir("./31" [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./32", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6002] <... sync resumed>) = 0 [pid 6001] <... sync resumed>) = 0 [pid 6000] <... sync resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6001] exit_group(0 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 6002] exit_group(0 [pid 6001] <... exit_group resumed>) = ? [pid 6000] exit_group(0./strace-static-x86_64: Process 6003 attached [pid 6002] <... exit_group resumed>) = ? [pid 6001] +++ exited with 0 +++ [pid 6000] <... exit_group resumed>) = ? [pid 5833] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6003 [pid 6003] set_robust_list(0x555557df1660, 24) = 0 [pid 6000] +++ exited with 0 +++ [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 6004 attached [pid 6003] chdir("./32" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6003] <... chdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6004 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6004] set_robust_list(0x555557df1660, 24 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6002] +++ exited with 0 +++ [pid 5832] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] <... set_robust_list resumed>) = 0 [pid 6003] <... prctl resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6002, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6004] chdir("./32" [pid 6003] setpgid(0, 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6004] <... chdir resumed>) = 0 [pid 6003] <... setpgid resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6003] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6004] <... prctl resumed>) = 0 [pid 6003] write(3, "1000", 4 [pid 5832] newfstatat(3, "", [pid 6004] setpgid(0, 0 [pid 6003] <... write resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6004] <... setpgid resumed>) = 0 [pid 6003] close(3 [pid 5829] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6003] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... openat resumed>) = 3 [pid 6004] <... openat resumed>) = 3 [pid 6003] <... symlink resumed>) = 0 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 6004] write(3, "1000", 4 [pid 6003] write(1, "executing program\n", 18 [pid 5832] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 executing program [pid 6004] <... write resumed>) = 4 [pid 6003] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] close(3 [pid 6003] memfd_create("syzkaller", 0 [pid 5831] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6004] <... close resumed>) = 0 [pid 5832] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./32/binderfs", [pid 6004] symlink("/dev/binderfs", "./binderfs" [pid 6003] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6004] <... symlink resumed>) = 0 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5831] <... openat resumed>) = 3 [pid 5829] unlink("./32/binderfs" executing program [pid 6004] write(1, "executing program\n", 18 [pid 6003] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(3, "", [pid 5829] <... unlink resumed>) = 0 [pid 6004] <... write resumed>) = 18 [pid 5832] unlink("./33/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] memfd_create("syzkaller", 0 [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 6004] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6004] <... mmap resumed>) = 0x7fd6d9800000 [pid 6003] <... write resumed>) = 524288 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./32/file1", [pid 6003] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6003] <... munmap resumed>) = 0 [pid 5831] unlink("./32/binderfs") = 0 [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6003] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] newfstatat(AT_FDCWD, "./33/file1", [pid 5831] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 6003] ioctl(4, LOOP_SET_FD, 3 [pid 5832] newfstatat(4, "", [pid 6003] <... ioctl resumed>) = 0 [pid 6004] <... write resumed>) = 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6004] munmap(0x7fd6d9800000, 138412032 [pid 5832] getdents64(4, [pid 6003] close(3 [pid 5831] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6004] <... munmap resumed>) = 0 [pid 6003] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 6004] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6003] close(4 [pid 5832] getdents64(4, [pid 6004] <... openat resumed>) = 4 [pid 6003] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(AT_FDCWD, "./32/file1", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6003] mkdir("./file1", 0777 [pid 5832] close(4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6004] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... close resumed>) = 0 [pid 5829] getdents64(4, [pid 6003] <... mkdir resumed>) = 0 [pid 5831] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./33/file1" [pid 6003] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(4 [pid 5831] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5829] rmdir("./32/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5829] getdents64(3, [pid 5832] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5831] close(4 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] rmdir("./32/file1" [pid 5829] rmdir("./32" [pid 5832] rmdir("./33") = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5832] mkdir("./34", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 6004] <... ioctl resumed>) = 0 [pid 6004] close(3) = 0 [pid 6004] close(4) = 0 [pid 6004] mkdir("./file1", 0777) = 0 [pid 5829] mkdir("./33", 0777 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6004] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6003] <... mount resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6005 attached [pid 6003] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6003] <... openat resumed>) = 3 [pid 6003] chdir("./file1" [pid 5831] rmdir("./32" [pid 5829] <... openat resumed>) = 3 [pid 6004] <... mount resumed>) = 0 [pid 6003] <... chdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6005] set_robust_list(0x555557df1660, 24 [pid 6004] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6003] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] mkdir("./33", 0777 [pid 5829] <... ioctl resumed>) = 0 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6004] <... openat resumed>) = 3 [pid 6003] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6005] chdir("./34" [pid 5831] <... mkdir resumed>) = 0 [pid 5829] close(3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6005 [pid 6004] chdir("./file1") = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6005] <... chdir resumed>) = 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] chdir("./file0" [pid 6005] setpgid(0, 0 [pid 6003] chdir("./file0" [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6005] <... setpgid resumed>) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6005] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6005] write(3, "1000", 4 [pid 6004] <... chdir resumed>) = 0 [pid 6005] <... write resumed>) = 4 [pid 6005] close(3) = 0 [pid 5831] close(3 [pid 6005] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6004] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6005] write(1, "executing program\n", 18 [pid 6004] <... openat resumed>) = 4 [pid 6003] <... chdir resumed>) = 0 [pid 6005] <... write resumed>) = 18 [pid 6005] memfd_create("syzkaller", 0) = 3 [ 70.677507][ T6003] loop1: detected capacity change from 0 to 1024 [ 70.699129][ T6004] loop4: detected capacity change from 0 to 1024 [pid 6004] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6003] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6006 attached [pid 6005] <... mmap resumed>) = 0x7fd6d9800000 [pid 6003] <... openat resumed>) = 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6006] set_robust_list(0x555557df1660, 24) = 0 [pid 6006] chdir("./33"./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x555557df1660, 24 [pid 6006] <... chdir resumed>) = 0 [pid 6003] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6007 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6006 [pid 6007] <... set_robust_list resumed>) = 0 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6004] <... creat resumed>) = 5 [pid 6007] chdir("./33") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6006] <... prctl resumed>) = 0 [pid 6004] sync( [pid 6007] <... prctl resumed>) = 0 [pid 6006] setpgid(0, 0 [pid 6007] setpgid(0, 0 [pid 6006] <... setpgid resumed>) = 0 [pid 6007] <... setpgid resumed>) = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] <... openat resumed>) = 3 [pid 6003] <... creat resumed>) = 5 [pid 6007] <... openat resumed>) = 3 [pid 6003] sync( [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6006] write(3, "1000", 4 [pid 6007] symlink("/dev/binderfs", "./binderfs" [pid 6006] <... write resumed>) = 4 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs" [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6006] <... symlink resumed>) = 0 executing program [pid 6005] <... write resumed>) = 524288 [pid 6007] <... symlink resumed>) = 0 [pid 6006] write(1, "executing program\n", 18 [pid 6004] <... sync resumed>) = 0 [pid 6003] <... sync resumed>) = 0 [pid 6006] <... write resumed>) = 18 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6003] exit_group(0 [pid 6006] <... mmap resumed>) = 0x7fd6d9800000 [pid 6004] exit_group(0executing program [pid 6007] write(1, "executing program\n", 18 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] <... exit_group resumed>) = ? [pid 6003] <... exit_group resumed>) = ? [pid 6007] <... write resumed>) = 18 [pid 6005] munmap(0x7fd6d9800000, 138412032 [pid 6007] memfd_create("syzkaller", 0 [pid 6005] <... munmap resumed>) = 0 [pid 6007] <... memfd_create resumed>) = 3 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6003] +++ exited with 0 +++ [pid 6005] <... openat resumed>) = 4 [pid 6007] <... mmap resumed>) = 0x7fd6d9800000 [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6004] +++ exited with 0 +++ [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6006] <... write resumed>) = 524288 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./32/binderfs") = 0 [pid 5833] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6006] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] <... munmap resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6006] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6006] <... openat resumed>) = 4 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5833] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6005] <... ioctl resumed>) = 0 [pid 5833] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6005] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6005] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(AT_FDCWD, "./32/binderfs", [pid 6005] close(4 [pid 5833] <... openat resumed>) = 4 [pid 6007] <... write resumed>) = 524288 [pid 6005] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6005] mkdir("./file1", 0777) = 0 [pid 6005] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] unlink("./32/binderfs" [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5833] rmdir("./32/file1" [pid 6007] munmap(0x7fd6d9800000, 138412032 [pid 6006] <... ioctl resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6007] <... munmap resumed>) = 0 [pid 5833] close(3 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6006] close(3 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./32" [pid 6007] <... openat resumed>) = 4 [pid 6006] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 6005] <... mount resumed>) = 0 [pid 5833] mkdir("./33", 0777 [pid 6005] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... mkdir resumed>) = 0 [pid 6005] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6005] chdir("./file1" [pid 6006] close(4 [pid 5833] <... openat resumed>) = 3 [pid 6005] <... chdir resumed>) = 0 [pid 6006] <... close resumed>) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6007] <... ioctl resumed>) = 0 [pid 6006] mkdir("./file1", 0777 [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... ioctl resumed>) = 0 [pid 6005] chdir("./file0" [pid 5833] close(3 [pid 6007] close(3 [pid 6006] <... mkdir resumed>) = 0 [pid 6005] <... chdir resumed>) = 0 [pid 6005] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6007] <... close resumed>) = 0 [pid 6006] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... umount2 resumed>) = 0 [pid 6007] close(4 [pid 5833] <... close resumed>) = 0 [pid 6007] <... close resumed>) = 0 [pid 5830] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6007] mkdir("./file1", 0777 [pid 6005] <... openat resumed>) = 4 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6007] <... mkdir resumed>) = 0 [ 70.819480][ T6005] loop3: detected capacity change from 0 to 1024 [ 70.847606][ T6006] loop0: detected capacity change from 0 to 1024 [ 70.861204][ T6007] loop2: detected capacity change from 0 to 1024 [pid 5830] newfstatat(4, "", ./strace-static-x86_64: Process 6008 attached [pid 6007] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6006] <... mount resumed>) = 0 [pid 6005] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6006] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] getdents64(4, [pid 6006] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6006] chdir("./file1") = 0 [pid 6005] <... creat resumed>) = 5 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6008 [pid 5830] getdents64(4, [pid 6006] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6008] set_robust_list(0x555557df1660, 24 [pid 6006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6005] sync( [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6006] chdir("./file0" [pid 5830] close(4 [pid 6008] <... set_robust_list resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6008] chdir("./33" [pid 5830] rmdir("./32/file1" [pid 6008] <... chdir resumed>) = 0 [pid 6006] <... chdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] getdents64(3, [pid 6008] <... prctl resumed>) = 0 [pid 6006] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6008] setpgid(0, 0 [pid 5830] close(3 [pid 6008] <... setpgid resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] rmdir("./32") = 0 [pid 6007] <... mount resumed>) = 0 [pid 6008] <... openat resumed>) = 3 [pid 6006] <... openat resumed>) = 4 [pid 5830] mkdir("./33", 0777 [pid 6007] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3 [pid 6007] <... openat resumed>) = 3 [pid 5830] <... mkdir resumed>) = 0 [pid 6008] <... close resumed>) = 0 [pid 6007] chdir("./file1" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6008] symlink("/dev/binderfs", "./binderfs" [pid 6007] <... chdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6006] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6008] <... symlink resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program ) = -1 EBUSY (Device or resource busy) [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6008] write(1, "executing program\n", 18 [pid 6005] <... sync resumed>) = 0 [pid 6008] <... write resumed>) = 18 [pid 5830] <... ioctl resumed>) = 0 [pid 6008] memfd_create("syzkaller", 0 [pid 6007] chdir("./file0" [pid 6006] <... creat resumed>) = 5 [pid 6005] exit_group(0 [pid 5830] close(3 [pid 6008] <... memfd_create resumed>) = 3 [pid 6005] <... exit_group resumed>) = ? [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6007] <... chdir resumed>) = 0 [pid 6006] sync( [pid 5830] <... close resumed>) = 0 [pid 6008] <... mmap resumed>) = 0x7fd6d9800000 [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6007] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6005] +++ exited with 0 +++ [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6007] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6009 attached [pid 6008] <... write resumed>) = 524288 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6008] munmap(0x7fd6d9800000, 138412032 [pid 6007] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6009] set_robust_list(0x555557df1660, 24 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6009 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6006] <... sync resumed>) = 0 [pid 6009] chdir("./33" [pid 6008] <... munmap resumed>) = 0 [pid 6006] exit_group(0 [pid 5832] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6009] <... chdir resumed>) = 0 [pid 6008] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6006] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6008] <... openat resumed>) = 4 [pid 6009] <... prctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6009] setpgid(0, 0 [pid 6008] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... openat resumed>) = 3 [pid 6009] <... setpgid resumed>) = 0 [pid 6006] +++ exited with 0 +++ [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./34/binderfs") = 0 [pid 5832] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6008] <... ioctl resumed>) = 0 [pid 6007] <... creat resumed>) = 5 [pid 6009] <... openat resumed>) = 3 [pid 6008] close(3 [pid 6007] sync( [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6009] write(3, "1000", 4 [pid 6008] <... close resumed>) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6009] <... write resumed>) = 4 [pid 6008] close(4 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6009] close(3 [pid 6008] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6009] <... close resumed>) = 0 [pid 6008] mkdir("./file1", 0777 [pid 5832] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6009] symlink("/dev/binderfs", "./binderfs" [pid 6008] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6008] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6009] <... symlink resumed>) = 0 executing program [pid 5832] newfstatat(AT_FDCWD, "./34/file1", [pid 5829] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6009] write(1, "executing program\n", 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6009] <... write resumed>) = 18 [pid 6008] <... mount resumed>) = 0 [pid 5832] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 6009] memfd_create("syzkaller", 0 [pid 6008] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6009] <... memfd_create resumed>) = 3 [pid 6008] <... openat resumed>) = 3 [pid 6007] <... sync resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(3, [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] chdir("./file1" [pid 5832] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6009] <... mmap resumed>) = 0x7fd6d9800000 [pid 6008] <... chdir resumed>) = 0 [pid 6007] exit_group(0) = ? [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6007] +++ exited with 0 +++ [pid 5832] newfstatat(4, "", [pid 5829] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6008] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] newfstatat(AT_FDCWD, "./33/binderfs", [pid 6008] chdir("./file0" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./33/binderfs") = 0 [pid 5829] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6008] <... chdir resumed>) = 0 [pid 6008] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6009] <... write resumed>) = 524288 [pid 5829] <... umount2 resumed>) = 0 [pid 6009] munmap(0x7fd6d9800000, 138412032 [pid 5832] getdents64(4, [pid 5829] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6009] <... munmap resumed>) = 0 [pid 6008] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6009] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6008] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6009] <... openat resumed>) = 4 [pid 5832] getdents64(4, [pid 5829] newfstatat(AT_FDCWD, "./33/file1", [pid 6009] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 70.981896][ T6008] loop4: detected capacity change from 0 to 1024 [pid 5829] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6009] <... ioctl resumed>) = 0 [pid 6008] <... creat resumed>) = 5 [pid 5832] close(4 [pid 6009] close(3) = 0 [pid 6009] close(4 [pid 5832] <... close resumed>) = 0 [pid 5831] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 6009] <... close resumed>) = 0 [pid 6008] sync( [pid 5832] rmdir("./34/file1" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6009] mkdir("./file1", 0777 [pid 5831] <... openat resumed>) = 3 [pid 6009] <... mkdir resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5829] getdents64(4, [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6009] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5829] getdents64(4, [pid 5832] getdents64(3, [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5832] close(3 [pid 5829] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./34" [pid 5829] rmdir("./33/file1" [pid 6009] <... mount resumed>) = 0 [pid 5831] unlink("./33/binderfs" [pid 6009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6009] chdir("./file1") = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6009] chdir("./file0" [pid 6008] <... sync resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6008] exit_group(0 [pid 5832] mkdir("./35", 0777 [pid 5831] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 6008] <... exit_group resumed>) = ? [pid 6009] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6009] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6009] <... openat resumed>) = 4 [pid 6008] +++ exited with 0 +++ [pid 5832] <... mkdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./33/file1", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] close(3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] <... openat resumed>) = 3 [pid 6009] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./33" [pid 6009] <... creat resumed>) = 5 [pid 5832] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 71.041918][ T6009] loop1: detected capacity change from 0 to 1024 [pid 5831] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6009] sync( [pid 5831] newfstatat(4, "", [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] mkdir("./34", 0777 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./33/file1" [pid 5833] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 6009] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6009] exit_group(0 [pid 5831] getdents64(3, [pid 6009] <... exit_group resumed>) = ? [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6010 attached [pid 5833] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] close(3 [pid 6010] set_robust_list(0x555557df1660, 24 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6010 [pid 5829] <... openat resumed>) = 3 [pid 6010] <... set_robust_list resumed>) = 0 [pid 6009] +++ exited with 0 +++ [pid 5833] newfstatat(3, "", [pid 5831] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6010] chdir("./35" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./33" [pid 5829] <... ioctl resumed>) = 0 [pid 6010] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] close(3 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... close resumed>) = 0 [pid 6010] <... prctl resumed>) = 0 [pid 5833] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./33/binderfs" [pid 6010] setpgid(0, 0 [pid 5833] <... unlink resumed>) = 0 [pid 5831] mkdir("./34", 0777 [pid 6010] <... setpgid resumed>) = 0 [pid 5833] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... mkdir resumed>) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6010] <... openat resumed>) = 3 [pid 5831] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] write(3, "1000", 4 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6010] <... write resumed>) = 4 [pid 5830] <... openat resumed>) = 3 [pid 6010] close(3 [pid 5830] newfstatat(3, "", [pid 6010] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6011 attached ) = 0 [pid 5833] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 6011] set_robust_list(0x555557df1660, 24 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6011] <... set_robust_list resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./33/file1", executing program [pid 6010] write(1, "executing program\n", 18 [pid 5830] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6011 ./strace-static-x86_64: Process 6012 attached [pid 6011] chdir("./34" [pid 6010] <... write resumed>) = 18 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] set_robust_list(0x555557df1660, 24 [pid 6011] <... chdir resumed>) = 0 [pid 6010] memfd_create("syzkaller", 0 [pid 5833] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./33/binderfs", [pid 6010] <... memfd_create resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6012 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] unlink("./33/binderfs" [pid 6012] <... set_robust_list resumed>) = 0 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6010] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... openat resumed>) = 4 [pid 6012] chdir("./34" [pid 6011] <... prctl resumed>) = 0 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [pid 6012] <... chdir resumed>) = 0 [pid 6011] setpgid(0, 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6011] <... setpgid resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] <... prctl resumed>) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] getdents64(4, [pid 6012] setpgid(0, 0 [pid 6011] <... openat resumed>) = 3 [pid 6012] <... setpgid resumed>) = 0 [pid 6011] write(3, "1000", 4 [pid 6010] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... umount2 resumed>) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6011] <... write resumed>) = 4 [pid 5833] getdents64(4, [pid 6012] <... openat resumed>) = 3 [pid 6011] close(3 [pid 6010] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6012] write(3, "1000", 4 [pid 6011] <... close resumed>) = 0 [pid 6010] <... munmap resumed>) = 0 [pid 5833] close(4 [pid 5830] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... write resumed>) = 4 [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... close resumed>) = 0 [pid 6012] close(3) = 0 [pid 6011] <... symlink resumed>) = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] rmdir("./33/file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 6010] <... openat resumed>) = 4 executing program executing program [pid 5830] newfstatat(AT_FDCWD, "./33/file1", [pid 6012] <... symlink resumed>) = 0 [pid 6010] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] write(1, "executing program\n", 18 [pid 6011] write(1, "executing program\n", 18 [pid 5833] getdents64(3, [pid 6012] <... write resumed>) = 18 [pid 6011] <... write resumed>) = 18 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6012] memfd_create("syzkaller", 0 [pid 6011] memfd_create("syzkaller", 0 [pid 5833] close(3 [pid 5830] umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] <... memfd_create resumed>) = 3 [pid 5830] getdents64(4, [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... close resumed>) = 0 [pid 6011] <... memfd_create resumed>) = 3 [pid 6012] <... mmap resumed>) = 0x7fd6d9800000 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] rmdir("./33" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6011] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./33/file1") = 0 [pid 5830] getdents64(3, [pid 5833] mkdir("./34", 0777 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./33") = 0 [pid 5830] mkdir("./34", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5833] <... openat resumed>) = 3 [pid 6010] <... ioctl resumed>) = 0 [pid 6010] close(3) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 6010] close(4) = 0 [pid 6010] mkdir("./file1", 0777) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6010] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6012] <... write resumed>) = 524288 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6010] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6013 attached [pid 6012] munmap(0x7fd6d9800000, 138412032 [pid 6010] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached [pid 6012] <... munmap resumed>) = 0 [pid 6010] <... openat resumed>) = 3 [pid 6010] chdir("./file1" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6013 [pid 6012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6010] <... chdir resumed>) = 0 [pid 6012] <... openat resumed>) = 4 [pid 6010] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 71.179401][ T6010] loop3: detected capacity change from 0 to 1024 [pid 6012] ioctl(4, LOOP_SET_FD, 3 [pid 6010] chdir("./file0" [pid 6014] set_robust_list(0x555557df1660, 24 [pid 6013] set_robust_list(0x555557df1660, 24 [pid 6011] <... write resumed>) = 524288 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6014 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6013] <... set_robust_list resumed>) = 0 [pid 6013] chdir("./34" [pid 6014] chdir("./34" [pid 6013] <... chdir resumed>) = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0 [pid 6014] <... chdir resumed>) = 0 [pid 6013] <... setpgid resumed>) = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6010] <... chdir resumed>) = 0 [pid 6014] setpgid(0, 0 [pid 6011] munmap(0x7fd6d9800000, 138412032 [pid 6014] <... setpgid resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6010] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6011] <... munmap resumed>) = 0 [pid 6010] <... openat resumed>) = 4 [pid 6013] <... openat resumed>) = 3 [pid 6014] <... openat resumed>) = 3 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6014] write(3, "1000", 4 [pid 6013] write(3, "1000", 4 [pid 6014] <... write resumed>) = 4 [pid 6013] <... write resumed>) = 4 [pid 6014] close(3 [pid 6013] close(3 [pid 6014] <... close resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6011] <... openat resumed>) = 4 [pid 6014] symlink("/dev/binderfs", "./binderfs" [pid 6013] symlink("/dev/binderfs", "./binderfs" [pid 6012] <... ioctl resumed>) = 0 [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 6014] <... symlink resumed>) = 0 [pid 6013] <... symlink resumed>) = 0 [pid 6010] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6012] close(3 [pid 6013] write(1, "executing program\n", 18 executing program executing program [pid 6012] <... close resumed>) = 0 [pid 6010] <... creat resumed>) = 5 [pid 6010] sync( [pid 6014] write(1, "executing program\n", 18 [pid 6013] <... write resumed>) = 18 [pid 6012] close(4 [pid 6014] <... write resumed>) = 18 [pid 6013] memfd_create("syzkaller", 0 [pid 6012] <... close resumed>) = 0 [pid 6014] memfd_create("syzkaller", 0 [pid 6013] <... memfd_create resumed>) = 3 [pid 6012] mkdir("./file1", 0777 [pid 6014] <... memfd_create resumed>) = 3 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6012] <... mkdir resumed>) = 0 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6013] <... mmap resumed>) = 0x7fd6d9800000 [pid 6012] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6014] <... mmap resumed>) = 0x7fd6d9800000 [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6012] <... mount resumed>) = 0 [pid 6011] <... ioctl resumed>) = 0 [pid 6012] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6012] chdir("./file1" [pid 6011] close(3 [pid 6012] <... chdir resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6011] close(4 [pid 6012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6011] <... close resumed>) = 0 [pid 6011] mkdir("./file1", 0777 [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6011] <... mkdir resumed>) = 0 [ 71.228349][ T6012] loop2: detected capacity change from 0 to 1024 [ 71.266250][ T6011] loop0: detected capacity change from 0 to 1024 [pid 6012] chdir("./file0" [pid 6011] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6012] <... chdir resumed>) = 0 [pid 6012] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6012] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6013] <... write resumed>) = 524288 [pid 6012] sync( [pid 6013] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6014] <... write resumed>) = 524288 [pid 6011] <... mount resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6010] <... sync resumed>) = 0 [pid 6012] <... sync resumed>) = 0 [pid 6014] munmap(0x7fd6d9800000, 138412032 [pid 6013] <... openat resumed>) = 4 [pid 6012] exit_group(0 [pid 6010] exit_group(0 [pid 6014] <... munmap resumed>) = 0 [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 6012] <... exit_group resumed>) = ? [pid 6011] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6011] <... openat resumed>) = 3 [pid 6010] <... exit_group resumed>) = ? [pid 6011] chdir("./file1" [pid 6010] +++ exited with 0 +++ [pid 6011] <... chdir resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6011] chdir("./file0" [pid 6014] <... openat resumed>) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6011] <... chdir resumed>) = 0 [pid 6011] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6014] <... ioctl resumed>) = 0 [pid 6013] <... ioctl resumed>) = 0 [pid 6012] +++ exited with 0 +++ [pid 5832] <... restart_syscall resumed>) = 0 [pid 6014] close(3 [pid 6013] close(3 [pid 6011] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6014] <... close resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6014] close(4 [pid 6013] close(4 [pid 6014] <... close resumed>) = 0 [pid 5831] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6013] <... close resumed>) = 0 [pid 6014] mkdir("./file1", 0777 [pid 6011] <... creat resumed>) = 5 [pid 5832] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] <... mkdir resumed>) = 0 [pid 6013] mkdir("./file1", 0777 [pid 6011] sync( [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./34/binderfs") = 0 [pid 5831] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6013] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6014] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 6013] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./35/binderfs") = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6014] <... mount resumed>) = 0 [pid 5832] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6014] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./34/file1", [pid 6014] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6014] chdir("./file1" [pid 5831] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6014] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5831] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6014] chdir("./file0" [pid 5831] <... openat resumed>) = 4 [pid 6013] <... mount resumed>) = 0 [pid 6013] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] newfstatat(4, "", [pid 6013] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6014] <... chdir resumed>) = 0 [pid 6013] chdir("./file1" [pid 5831] getdents64(4, [pid 5832] <... umount2 resumed>) = 0 [pid 6013] <... chdir resumed>) = 0 [pid 6014] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 71.347095][ T6013] loop1: detected capacity change from 0 to 1024 [ 71.356095][ T6014] loop4: detected capacity change from 0 to 1024 [pid 5831] getdents64(4, [pid 6014] <... openat resumed>) = 4 [pid 6014] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6013] chdir("./file0" [pid 5832] newfstatat(AT_FDCWD, "./35/file1", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6014] <... creat resumed>) = 5 [pid 6013] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./34/file1" [pid 6013] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6014] sync( [pid 6011] <... sync resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6011] exit_group(0 [pid 5832] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6011] <... exit_group resumed>) = ? [pid 5831] getdents64(3, [pid 6013] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 4 [pid 6011] +++ exited with 0 +++ [pid 5832] newfstatat(4, "", [pid 6013] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5832] getdents64(4, [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5831] close(3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] rmdir("./35/file1" [pid 5831] rmdir("./34" [pid 6013] <... creat resumed>) = 5 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6013] sync( [pid 5831] mkdir("./35", 0777 [pid 6014] <... sync resumed>) = 0 [pid 6013] <... sync resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6014] exit_group(0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6014] <... exit_group resumed>) = ? [pid 6013] exit_group(0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6013] <... exit_group resumed>) = ? [pid 5832] close(3) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./35" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 6014] +++ exited with 0 +++ [pid 6013] +++ exited with 0 +++ [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] close(3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] newfstatat(3, "", [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] mkdir("./36", 0777 [pid 5831] <... close resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] getdents64(3, ./strace-static-x86_64: Process 6015 attached 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6015] set_robust_list(0x555557df1660, 24 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6015 [pid 5830] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./34/binderfs", [pid 6015] <... set_robust_list resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6015] chdir("./35" [pid 5833] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] unlink("./34/binderfs" [pid 6015] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... unlink resumed>) = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] close(3 [pid 6015] <... prctl resumed>) = 0 [pid 5833] getdents64(3, [pid 5830] newfstatat(3, "", [pid 6015] setpgid(0, 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6015] <... setpgid resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6015] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6015] write(3, "1000", 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./34/binderfs", [pid 6015] <... write resumed>) = 4 [pid 5833] unlink("./34/binderfs") = 0 [pid 6015] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6015] <... close resumed>) = 0 [pid 5830] unlink("./34/binderfs" [pid 6015] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 6015] <... symlink resumed>) = 0 [pid 5829] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6015] write(1, "executing program\n", 18 executing program [pid 5833] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6016 attached [pid 6015] <... write resumed>) = 18 [pid 5829] newfstatat(AT_FDCWD, "./34/file1", [pid 6016] set_robust_list(0x555557df1660, 24 [pid 6015] memfd_create("syzkaller", 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6016] <... set_robust_list resumed>) = 0 [pid 5829] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6016] chdir("./36" [pid 6015] <... memfd_create resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6016 [pid 6016] <... chdir resumed>) = 0 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] <... prctl resumed>) = 0 [pid 5833] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6016] setpgid(0, 0 [pid 6015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6016] <... setpgid resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./34/file1", [pid 5829] <... openat resumed>) = 4 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(4, "", [pid 6016] <... openat resumed>) = 3 [pid 5830] umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6016] write(3, "1000", 4 [pid 5833] newfstatat(4, "", [pid 6016] <... write resumed>) = 4 [pid 5829] getdents64(4, [pid 6016] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6016] <... close resumed>) = 0 [pid 6015] <... write resumed>) = 524288 [pid 5833] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 6016] symlink("/dev/binderfs", "./binderfs" [pid 6015] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6016] <... symlink resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(4, "", executing program [pid 5829] close(4 [pid 5833] close(4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6016] write(1, "executing program\n", 18 [pid 6015] <... munmap resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 6016] <... write resumed>) = 18 [pid 6015] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] rmdir("./34/file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] rmdir("./34/file1" [pid 6016] memfd_create("syzkaller", 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 6016] <... memfd_create resumed>) = 3 [pid 6015] <... openat resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6015] ioctl(4, LOOP_SET_FD, 3 [pid 5833] getdents64(3, [pid 6016] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] rmdir("./34/file1" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5829] close(3 [pid 5833] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] rmdir("./34" [pid 5829] rmdir("./34" [pid 5833] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] mkdir("./35", 0777 [pid 5829] mkdir("./35", 0777 [pid 5833] <... mkdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6015] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5830] getdents64(3, [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6015] close(3 [pid 5833] <... close resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6016] <... write resumed>) = 524288 [pid 6015] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5829] close(3 [pid 6015] close(4 [pid 5830] <... close resumed>) = 0 [pid 6015] <... close resumed>) = 0 [pid 5830] rmdir("./34" [pid 5829] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6015] mkdir("./file1", 0777 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./35", 0777 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6017 [pid 6015] <... mkdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6015] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6016] munmap(0x7fd6d9800000, 138412032./strace-static-x86_64: Process 6017 attached [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3./strace-static-x86_64: Process 6018 attached [pid 6016] <... munmap resumed>) = 0 [pid 6018] set_robust_list(0x555557df1660, 24 [pid 5830] <... close resumed>) = 0 [pid 6018] <... set_robust_list resumed>) = 0 [pid 6018] chdir("./35" [pid 6016] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6018 [pid 6018] <... chdir resumed>) = 0 [pid 6015] <... mount resumed>) = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 6015] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6018] <... prctl resumed>) = 0 [pid 6017] set_robust_list(0x555557df1660, 24 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6017] <... set_robust_list resumed>) = 0 [pid 6018] setpgid(0, 0 [pid 6015] <... openat resumed>) = 3 [pid 6018] <... setpgid resumed>) = 0 [pid 6015] chdir("./file1" [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6017] chdir("./35" [pid 6015] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6019 attached [pid 6017] <... chdir resumed>) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6015] chdir("./file0" [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 6019] set_robust_list(0x555557df1660, 24 [pid 6018] <... openat resumed>) = 3 [pid 6017] <... prctl resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6019 [pid 6019] <... set_robust_list resumed>) = 0 [pid 6017] setpgid(0, 0 [pid 6019] chdir("./35" [pid 6017] <... setpgid resumed>) = 0 [pid 6018] write(3, "1000", 4) = 4 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6018] close(3) = 0 [pid 6015] <... chdir resumed>) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs" [pid 6015] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6018] <... symlink resumed>) = 0 [pid 6015] <... openat resumed>) = 4 [pid 6018] write(1, "executing program\n", 18) = 18 [pid 6018] memfd_create("syzkaller", 0) = 3 [pid 6015] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6019] <... chdir resumed>) = 0 [pid 6017] <... openat resumed>) = 3 [pid 6016] <... ioctl resumed>) = 0 [pid 6015] <... creat resumed>) = 5 [pid 6015] sync( [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6017] write(3, "1000", 4 [pid 6016] close(3 [pid 6017] <... write resumed>) = 4 [pid 6019] <... prctl resumed>) = 0 [pid 6019] setpgid(0, 0 [pid 6016] <... close resumed>) = 0 [pid 6016] close(4) = 0 [pid 6016] mkdir("./file1", 0777) = 0 [pid 6016] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6019] <... setpgid resumed>) = 0 [pid 6017] close(3) = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6019] <... openat resumed>) = 3 [pid 6016] <... mount resumed>) = 0 [pid 6016] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6019] write(3, "1000", 4 [pid 6016] <... openat resumed>) = 3 [pid 6016] chdir("./file1") = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 71.560659][ T6015] loop2: detected capacity change from 0 to 1024 [ 71.600744][ T6016] loop3: detected capacity change from 0 to 1024 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6019] <... write resumed>) = 4 [pid 6016] chdir("./file0" [pid 6019] close(3) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs" [pid 6018] <... write resumed>) = 524288 [pid 6017] <... symlink resumed>) = 0 [pid 6017] write(1, "executing program\n", 18 [pid 6016] <... chdir resumed>) = 0 [pid 6016] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000executing program [pid 6017] <... write resumed>) = 18 [pid 6016] <... openat resumed>) = 4 [pid 6019] <... symlink resumed>) = 0 [pid 6018] munmap(0x7fd6d9800000, 138412032 [pid 6017] memfd_create("syzkaller", 0 [pid 6015] <... sync resumed>) = 0 [pid 6017] <... memfd_create resumed>) = 3 [pid 6015] exit_group(0 [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6016] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6015] <... exit_group resumed>) = ? [pid 6015] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- executing program [pid 6019] write(1, "executing program\n", 18 [pid 6018] <... munmap resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6019] <... write resumed>) = 18 [pid 6019] memfd_create("syzkaller", 0 [pid 6018] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6019] <... memfd_create resumed>) = 3 [pid 6018] <... openat resumed>) = 4 [pid 6017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 6016] <... creat resumed>) = 5 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6016] sync( [pid 5831] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./35/binderfs") = 0 [pid 5831] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6017] <... write resumed>) = 524288 [pid 6016] <... sync resumed>) = 0 [pid 6017] munmap(0x7fd6d9800000, 138412032 [pid 6016] exit_group(0 [pid 6019] <... write resumed>) = 524288 [pid 6017] <... munmap resumed>) = 0 [pid 6016] <... exit_group resumed>) = ? [pid 6019] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6017] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6016] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = 0 [pid 6019] ioctl(4, LOOP_SET_FD, 3 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6017] <... openat resumed>) = 4 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6017] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6018] <... ioctl resumed>) = 0 [pid 6018] close(3) = 0 [pid 6018] close(4 [pid 6019] <... ioctl resumed>) = 0 [pid 6018] <... close resumed>) = 0 [pid 6017] <... ioctl resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./35/file1", [pid 6019] close(3 [pid 6018] mkdir("./file1", 0777 [pid 6017] close(3 [pid 5832] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6019] <... close resumed>) = 0 [pid 6017] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6019] close(4 [pid 6018] <... mkdir resumed>) = 0 [pid 6017] close(4 [pid 5832] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6019] <... close resumed>) = 0 [pid 6018] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "") = 0 [pid 6019] mkdir("./file1", 0777 [pid 6017] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6019] <... mkdir resumed>) = 0 [pid 6018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6017] mkdir("./file1", 0777 [pid 5832] newfstatat(3, "", [pid 6019] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6018] <... openat resumed>) = 3 [pid 6017] <... mkdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6018] chdir("./file1" [pid 6017] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(3, [pid 5831] <... openat resumed>) = 4 [pid 6019] <... mount resumed>) = 0 [pid 6018] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(4, "", [pid 6019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6018] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6019] <... openat resumed>) = 3 [pid 6018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6019] chdir("./file1" [pid 6018] chdir("./file0" [pid 5832] newfstatat(AT_FDCWD, "./36/binderfs", [pid 6019] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(4, [pid 6019] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6018] <... chdir resumed>) = 0 [pid 5832] unlink("./36/binderfs" [pid 6019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6018] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6017] <... mount resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6019] chdir("./file0" [pid 6017] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 71.709086][ T6018] loop0: detected capacity change from 0 to 1024 [ 71.727622][ T6019] loop1: detected capacity change from 0 to 1024 [ 71.735176][ T6017] loop4: detected capacity change from 0 to 1024 [pid 5832] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6017] <... openat resumed>) = 3 [pid 5831] getdents64(4, [pid 6017] chdir("./file1" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6019] <... chdir resumed>) = 0 [pid 6017] <... chdir resumed>) = 0 [pid 5831] close(4 [pid 5832] <... umount2 resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 6019] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6018] <... openat resumed>) = 4 [pid 6017] chdir("./file0" [pid 6018] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] rmdir("./35/file1" [pid 6019] <... openat resumed>) = 4 [pid 5831] <... rmdir resumed>) = 0 [pid 6019] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6017] <... chdir resumed>) = 0 [pid 5831] getdents64(3, [pid 6017] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./36/file1", [pid 5831] rmdir("./35" [pid 6019] <... creat resumed>) = 5 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6018] <... creat resumed>) = 5 [pid 5832] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./36", 0777 [pid 6018] sync( [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6019] sync( [pid 6017] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... mkdir resumed>) = 0 [pid 6017] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] newfstatat(4, "", [pid 5831] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] getdents64(4, [pid 5831] <... ioctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] close(3 [pid 6017] <... creat resumed>) = 5 [pid 5832] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6017] sync( [pid 5832] close(4) = 0 [pid 5832] rmdir("./36/file1" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, ./strace-static-x86_64: Process 6020 attached 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6020 [pid 6020] set_robust_list(0x555557df1660, 24 [pid 5832] rmdir("./36" [pid 6020] <... set_robust_list resumed>) = 0 [pid 6019] <... sync resumed>) = 0 [pid 6019] exit_group(0 [pid 6018] <... sync resumed>) = 0 [pid 6020] chdir("./36" [pid 6019] <... exit_group resumed>) = ? [pid 6018] exit_group(0 [pid 5832] <... rmdir resumed>) = 0 [pid 6020] <... chdir resumed>) = 0 [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] <... exit_group resumed>) = ? [pid 6020] setpgid(0, 0 [pid 6019] +++ exited with 0 +++ [pid 6018] +++ exited with 0 +++ [pid 5832] mkdir("./37", 0777 [pid 6020] <... setpgid resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6017] <... sync resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 3 [pid 6017] exit_group(0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] newfstatat(3, "", [pid 5830] <... openat resumed>) = 3 [pid 6020] <... openat resumed>) = 3 [pid 6017] <... exit_group resumed>) = ? [pid 5832] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6020] write(3, "1000", 4 [pid 5830] newfstatat(3, "", [pid 6020] <... write resumed>) = 4 [pid 6020] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 6020] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6020] symlink("/dev/binderfs", "./binderfs" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] <... symlink resumed>) = 0 [pid 6017] +++ exited with 0 +++ [pid 5832] <... ioctl resumed>) = 0 [pid 5830] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] write(1, "executing program\n", 18 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 5832] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./35/binderfs", [pid 6020] <... write resumed>) = 18 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./35/binderfs") = 0 [pid 5830] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5829] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./35/binderfs" [pid 6020] memfd_create("syzkaller", 0 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] <... memfd_create resumed>) = 3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6020] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6021 [pid 5833] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5829] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] unlink("./35/binderfs" [pid 5829] newfstatat(AT_FDCWD, "./35/file1", [pid 5833] <... unlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6021 attached [pid 5833] <... umount2 resumed>) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./35/file1" [pid 6021] set_robust_list(0x555557df1660, 24 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./35/file1", [pid 6021] <... set_robust_list resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] getdents64(3, [pid 5833] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(3 [pid 5833] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5829] rmdir("./35" [pid 5833] newfstatat(4, "", [pid 5829] <... rmdir resumed>) = 0 [pid 6021] chdir("./37" [pid 5830] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] mkdir("./36", 0777 [pid 5833] getdents64(4, [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] getdents64(4, [pid 5829] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 6021] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./35/file1") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./35") = 0 [pid 5833] mkdir("./36", 0777) = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6020] <... write resumed>) = 524288 [pid 5830] newfstatat(AT_FDCWD, "./35/file1", [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6021] <... prctl resumed>) = 0 [pid 6020] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6021] setpgid(0, 0./strace-static-x86_64: Process 6022 attached ) = 0 [pid 6020] <... munmap resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] umount2("./35/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6021] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6021] write(3, "1000", 4 [pid 6020] <... openat resumed>) = 4 [pid 5833] close(3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6022 [pid 6022] set_robust_list(0x555557df1660, 24 [pid 6021] <... write resumed>) = 4 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6021] close(3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557df1650) = 6023 [pid 5830] newfstatat(4, "", ./strace-static-x86_64: Process 6023 attached [pid 6022] chdir("./36" [pid 6021] <... close resumed>) = 0 [pid 6023] set_robust_list(0x555557df1660, 24 [pid 6022] <... chdir resumed>) = 0 [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 6020] <... ioctl resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6023] <... set_robust_list resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6021] <... symlink resumed>) = 0 [pid 6020] close(3 [pid 5830] getdents64(4, [pid 6023] chdir("./36"executing program [pid 6022] <... prctl resumed>) = 0 [pid 6021] write(1, "executing program\n", 18 [pid 6020] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6023] <... chdir resumed>) = 0 [pid 6022] setpgid(0, 0 [pid 6021] <... write resumed>) = 18 [pid 6020] close(4 [pid 5830] getdents64(4, [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6022] <... setpgid resumed>) = 0 [pid 6021] memfd_create("syzkaller", 0 [pid 6020] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6023] <... prctl resumed>) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6021] <... memfd_create resumed>) = 3 [pid 6020] mkdir("./file1", 0777 [pid 5830] close(4 [pid 6023] setpgid(0, 0 [pid 6022] <... openat resumed>) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6020] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6023] <... setpgid resumed>) = 0 [pid 6022] write(3, "1000", 4 [pid 6021] <... mmap resumed>) = 0x7fd6d9800000 [pid 6020] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] rmdir("./35/file1" [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6022] <... write resumed>) = 4 [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6020] <... mount resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6023] <... openat resumed>) = 3 [pid 6022] close(3 [pid 6020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6020] chdir("./file1") = 0 [pid 6023] write(3, "1000", 4 [pid 6020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6023] <... write resumed>) = 4 [pid 6020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6023] close(3 [pid 6022] <... close resumed>) = 0 [pid 6020] chdir("./file0" [pid 5830] getdents64(3, [pid 6023] <... close resumed>) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs" [pid 6023] symlink("/dev/binderfs", "./binderfs" [pid 6022] <... symlink resumed>) = 0 [pid 6020] <... chdir resumed>) = 0 [pid 6023] <... symlink resumed>) = 0 [pid 6022] write(1, "executing program\n", 18 [ 71.918389][ T6020] loop2: detected capacity change from 0 to 1024 [pid 6020] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000executing program executing program [pid 6023] write(1, "executing program\n", 18 [pid 6022] <... write resumed>) = 18 [pid 6020] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6023] <... write resumed>) = 18 [pid 6022] memfd_create("syzkaller", 0 [pid 5830] close(3 [pid 6023] memfd_create("syzkaller", 0 [pid 6022] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 6023] <... memfd_create resumed>) = 3 [pid 6020] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5830] rmdir("./35" [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6021] <... write resumed>) = 524288 [pid 6020] <... creat resumed>) = 5 [pid 5830] <... rmdir resumed>) = 0 [pid 6022] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] mkdir("./36", 0777 [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6021] munmap(0x7fd6d9800000, 138412032 [pid 6020] sync( [pid 6023] <... write resumed>) = 524288 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6021] <... munmap resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6023] munmap(0x7fd6d9800000, 138412032 [pid 6021] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6023] <... munmap resumed>) = 0 [pid 6021] ioctl(4, LOOP_SET_FD, 3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6022] <... write resumed>) = 524288 [pid 6022] munmap(0x7fd6d9800000, 138412032 [pid 6023] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6021] <... ioctl resumed>) = 0 [pid 6020] <... sync resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6023] <... openat resumed>) = 4 [pid 6022] <... munmap resumed>) = 0 [pid 6021] close(3 [pid 6020] exit_group(0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 6023] ioctl(4, LOOP_SET_FD, 3 [pid 6021] <... close resumed>) = 0 [pid 6023] <... ioctl resumed>) = 0 [pid 6021] close(4 [pid 6020] <... exit_group resumed>) = ? [pid 6021] <... close resumed>) = 0 [pid 6020] +++ exited with 0 +++ [pid 6021] mkdir("./file1", 0777 [pid 6022] <... openat resumed>) = 4 [pid 6021] <... mkdir resumed>) = 0 [pid 6021] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6022] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... close resumed>) = 0 [pid 6021] <... mount resumed>) = 0 [pid 6023] close(3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6022] <... ioctl resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6021] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] chdir("./file1") = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6023] <... close resumed>) = 0 [pid 6023] close(4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6024 [pid 6021] chdir("./file0" [pid 6023] <... close resumed>) = 0 ./strace-static-x86_64: Process 6024 attached [pid 6023] mkdir("./file1", 0777 [pid 6022] close(3 [pid 6021] <... chdir resumed>) = 0 [pid 6023] <... mkdir resumed>) = 0 [pid 6022] <... close resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6022] close(4 [pid 6021] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6023] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... openat resumed>) = 3 [pid 6022] mkdir("./file1", 0777 [pid 6024] set_robust_list(0x555557df1660, 24 [pid 6022] <... mkdir resumed>) = 0 [pid 6021] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] newfstatat(3, "", [pid 6022] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6024] <... set_robust_list resumed>) = 0 [pid 5831] getdents64(3, [pid 6024] chdir("./36" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6024] <... chdir resumed>) = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6024] <... prctl resumed>) = 0 [pid 6024] setpgid(0, 0 [pid 6021] <... creat resumed>) = 5 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] <... setpgid resumed>) = 0 [pid 6023] <... mount resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./36/binderfs" [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... unlink resumed>) = 0 [pid 6024] <... openat resumed>) = 3 [pid 6023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] sync( [pid 5831] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 72.005799][ T6021] loop3: detected capacity change from 0 to 1024 [ 72.022878][ T6023] loop4: detected capacity change from 0 to 1024 [ 72.034894][ T6022] loop0: detected capacity change from 0 to 1024 executing program [pid 6024] write(3, "1000", 4 [pid 6023] chdir("./file1") = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6024] <... write resumed>) = 4 [pid 6024] close(3) = 0 [pid 6023] chdir("./file0" [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] write(1, "executing program\n", 18) = 18 [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] <... mount resumed>) = 0 [pid 6022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6024] <... mmap resumed>) = 0x7fd6d9800000 [pid 6023] <... chdir resumed>) = 0 [pid 6022] <... openat resumed>) = 3 [pid 6023] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6022] chdir("./file1" [pid 5831] <... umount2 resumed>) = 0 [pid 6022] <... chdir resumed>) = 0 [pid 6023] <... openat resumed>) = 4 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] newfstatat(AT_FDCWD, "./36/file1", [pid 6022] chdir("./file0" [pid 6023] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6022] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6022] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6023] <... creat resumed>) = 5 [pid 6022] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6023] sync( [pid 6022] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] getdents64(4, [pid 6024] <... write resumed>) = 524288 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6022] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./36/file1" [pid 6022] sync( [pid 6024] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... rmdir resumed>) = 0 [pid 6021] <... sync resumed>) = 0 [pid 6021] exit_group(0 [pid 6024] <... munmap resumed>) = 0 [pid 6023] <... sync resumed>) = 0 [pid 6022] <... sync resumed>) = 0 [pid 6021] <... exit_group resumed>) = ? [pid 5831] getdents64(3, [pid 6021] +++ exited with 0 +++ [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6024] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6023] exit_group(0 [pid 6022] exit_group(0 [pid 5831] close(3 [pid 6023] <... exit_group resumed>) = ? [pid 6022] <... exit_group resumed>) = ? [pid 6024] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./36" [pid 6024] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... rmdir resumed>) = 0 [pid 6023] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] mkdir("./37", 0777 [pid 6024] <... ioctl resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6024] close(3 [pid 5831] <... mkdir resumed>) = 0 [pid 6024] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6024] close(4) = 0 [pid 5833] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5831] close(3 [pid 5829] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6024] mkdir("./file1", 0777 [pid 5833] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6024] <... mkdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 6024] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5832] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5829] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./37/binderfs" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] unlink("./36/binderfs" [pid 5832] <... unlink resumed>) = 0 [pid 5829] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5832] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] newfstatat(AT_FDCWD, "./36/binderfs", ./strace-static-x86_64: Process 6025 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6025] set_robust_list(0x555557df1660, 24 [pid 5829] unlink("./36/binderfs" [pid 6025] <... set_robust_list resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 6025] chdir("./37" [pid 5829] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6025] <... chdir resumed>) = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6025 [pid 6025] <... prctl resumed>) = 0 [pid 6025] setpgid(0, 0) = 0 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 72.148886][ T6024] loop1: detected capacity change from 0 to 1024 [pid 6024] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6025] write(3, "1000", 4 [pid 6024] <... openat resumed>) = 3 [pid 6024] chdir("./file1" [pid 6025] <... write resumed>) = 4 [pid 6024] <... chdir resumed>) = 0 [pid 5833] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6024] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6025] close(3 [pid 6024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] newfstatat(AT_FDCWD, "./36/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6025] <... close resumed>) = 0 [pid 6024] chdir("./file0" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./36/file1", [pid 6025] symlink("/dev/binderfs", "./binderfs" [pid 5832] newfstatat(AT_FDCWD, "./37/file1", [pid 6025] <... symlink resumed>) = 0 executing program [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6025] write(1, "executing program\n", 18 [pid 5833] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6025] <... write resumed>) = 18 [pid 6025] memfd_create("syzkaller", 0) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6025] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6024] <... chdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, [pid 5832] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6024] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] getdents64(4, [pid 5832] newfstatat(4, "", [pid 5829] newfstatat(4, "", [pid 6024] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] close(4 [pid 5832] getdents64(4, [pid 5829] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6024] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] rmdir("./36/file1" [pid 5832] getdents64(4, [pid 5829] getdents64(4, [pid 5833] <... rmdir resumed>) = 0 [pid 6025] <... write resumed>) = 524288 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 6025] munmap(0x7fd6d9800000, 138412032 [pid 5829] rmdir("./36/file1") = 0 [pid 5832] close(4) = 0 [pid 5829] getdents64(3, [pid 6025] <... munmap resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] rmdir("./37/file1" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6025] <... openat resumed>) = 4 [pid 5833] close(3 [pid 5829] <... close resumed>) = 0 [pid 6024] <... creat resumed>) = 5 [pid 5832] getdents64(3, [pid 5829] rmdir("./36" [pid 5833] <... close resumed>) = 0 [pid 6025] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6024] sync( [pid 5833] rmdir("./36" [pid 5832] close(3) = 0 [pid 6025] <... ioctl resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] rmdir("./37" [pid 5829] mkdir("./37", 0777 [pid 6025] close(3 [pid 6024] <... sync resumed>) = 0 [pid 6025] <... close resumed>) = 0 [pid 6025] close(4) = 0 [pid 5833] mkdir("./37", 0777 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5832] mkdir("./38", 0777 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3) = 0 [pid 5829] close(3 [pid 6025] mkdir("./file1", 0777 [pid 6024] exit_group(0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6026 attached [pid 6025] <... mkdir resumed>) = 0 [pid 6024] <... exit_group resumed>) = ? [pid 5832] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6026 [pid 5832] <... ioctl resumed>) = 0 [pid 6026] set_robust_list(0x555557df1660, 24 [pid 5832] close(3 [pid 6025] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6024] +++ exited with 0 +++ [pid 5832] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6026] <... set_robust_list resumed>) = 0 [pid 6026] chdir("./37") = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6026] setpgid(0, 0) = 0 [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6026] write(3, "1000", 4executing program ) = 4 ./strace-static-x86_64: Process 6027 attached [pid 6026] close(3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6027 [pid 6026] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6026] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6028 attached [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6026] write(1, "executing program\n", 18 [pid 5830] <... openat resumed>) = 3 [pid 6028] set_robust_list(0x555557df1660, 24 [pid 6027] set_robust_list(0x555557df1660, 24 [pid 6026] <... write resumed>) = 18 [pid 5830] newfstatat(3, "", [pid 6028] <... set_robust_list resumed>) = 0 [pid 6026] memfd_create("syzkaller", 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6028 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6028] chdir("./38" [pid 6026] <... memfd_create resumed>) = 3 [pid 5830] getdents64(3, [pid 6028] <... chdir resumed>) = 0 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6026] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] <... prctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6028] setpgid(0, 0 [pid 5830] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 72.251542][ T6025] loop2: detected capacity change from 0 to 1024 [pid 6028] <... setpgid resumed>) = 0 [pid 6027] <... set_robust_list resumed>) = 0 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] unlink("./36/binderfs" [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6027] chdir("./37" [pid 6028] <... openat resumed>) = 3 [pid 6027] <... chdir resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 6028] write(3, "1000", 4 [pid 5830] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] <... write resumed>) = 4 [pid 6028] close(3) = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6028] symlink("/dev/binderfs", "./binderfs" [pid 6025] <... mount resumed>) = 0 [pid 6027] <... prctl resumed>) = 0 executing program [pid 6028] <... symlink resumed>) = 0 [pid 6027] setpgid(0, 0 [pid 6025] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6028] write(1, "executing program\n", 18 [pid 6027] <... setpgid resumed>) = 0 [pid 6028] <... write resumed>) = 18 [pid 5830] <... umount2 resumed>) = 0 [pid 6028] memfd_create("syzkaller", 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6025] <... openat resumed>) = 3 [pid 6028] <... memfd_create resumed>) = 3 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6027] <... openat resumed>) = 3 [pid 6025] chdir("./file1" [pid 6028] <... mmap resumed>) = 0x7fd6d9800000 [pid 6025] <... chdir resumed>) = 0 [pid 5830] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6027] write(3, "1000", 4 [pid 6025] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6027] <... write resumed>) = 4 [pid 6025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6027] close(3 [pid 6025] chdir("./file0" [pid 6027] <... close resumed>) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6027] write(1, "executing program\n", 18 [pid 6026] <... write resumed>) = 524288 [pid 5830] umount2("./36/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6027] <... write resumed>) = 18 [pid 5830] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6027] memfd_create("syzkaller", 0 [pid 5830] <... openat resumed>) = 4 [pid 6027] <... memfd_create resumed>) = 3 [pid 5830] newfstatat(4, "", [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6025] <... chdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 6028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6027] <... mmap resumed>) = 0x7fd6d9800000 [pid 6025] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... close resumed>) = 0 [pid 6026] munmap(0x7fd6d9800000, 138412032 [pid 5830] rmdir("./36/file1" [pid 6026] <... munmap resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, [pid 6026] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6025] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6026] ioctl(4, LOOP_SET_FD, 3 [pid 5830] close(3 [pid 6027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6025] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... close resumed>) = 0 [pid 6028] <... write resumed>) = 524288 [pid 5830] rmdir("./36" [pid 6026] <... ioctl resumed>) = 0 [pid 6025] <... creat resumed>) = 5 [pid 6028] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... rmdir resumed>) = 0 [pid 6028] <... munmap resumed>) = 0 [pid 6025] sync( [pid 5830] mkdir("./37", 0777) = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6026] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6028] <... openat resumed>) = 4 [pid 6026] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6028] ioctl(4, LOOP_SET_FD, 3 [pid 6026] close(4 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6028] <... ioctl resumed>) = 0 [pid 6026] <... close resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 6027] <... write resumed>) = 524288 [pid 6026] mkdir("./file1", 0777 [pid 6027] munmap(0x7fd6d9800000, 138412032 [pid 6026] <... mkdir resumed>) = 0 [pid 6027] <... munmap resumed>) = 0 [pid 6026] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6027] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 72.348898][ T6026] loop4: detected capacity change from 0 to 1024 [ 72.372889][ T6028] loop3: detected capacity change from 0 to 1024 [pid 6027] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6029 attached [pid 6028] close(3 [pid 6029] set_robust_list(0x555557df1660, 24 [pid 6028] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6029 [pid 6028] close(4 [pid 6029] <... set_robust_list resumed>) = 0 [pid 6028] <... close resumed>) = 0 [pid 6029] chdir("./37") = 0 [pid 6028] mkdir("./file1", 0777 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] <... mkdir resumed>) = 0 [pid 6029] setpgid(0, 0 [pid 6026] <... mount resumed>) = 0 [pid 6029] <... setpgid resumed>) = 0 [pid 6026] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6028] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6026] <... openat resumed>) = 3 [pid 6026] chdir("./file1" [pid 6029] <... openat resumed>) = 3 [pid 6026] <... chdir resumed>) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6029] write(3, "1000", 4 [pid 6026] chdir("./file0" [pid 6029] <... write resumed>) = 4 [pid 6029] close(3 [pid 6026] <... chdir resumed>) = 0 [pid 6029] <... close resumed>) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6029] write(1, "executing program\n", 18 [pid 6025] <... sync resumed>) = 0 [pid 6029] <... write resumed>) = 18 [pid 6025] exit_group(0 [pid 6029] memfd_create("syzkaller", 0 [pid 6027] <... ioctl resumed>) = 0 [pid 6026] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6025] <... exit_group resumed>) = ? [pid 6025] +++ exited with 0 +++ [pid 6029] <... memfd_create resumed>) = 3 [pid 6028] <... mount resumed>) = 0 [pid 6027] close(3 [pid 6026] <... openat resumed>) = 4 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6028] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6027] <... close resumed>) = 0 [pid 6026] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6029] <... mmap resumed>) = 0x7fd6d9800000 [pid 6028] <... openat resumed>) = 3 [pid 6027] close(4 [ 72.394544][ T6027] loop0: detected capacity change from 0 to 1024 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6028] chdir("./file1" [pid 5831] <... restart_syscall resumed>) = 0 [pid 6028] <... chdir resumed>) = 0 [pid 6027] <... close resumed>) = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6027] mkdir("./file1", 0777 [pid 6028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6027] <... mkdir resumed>) = 0 [pid 6026] <... creat resumed>) = 5 [pid 5831] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] chdir("./file0" [pid 6026] sync( [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6027] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6028] <... chdir resumed>) = 0 [pid 6028] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6028] <... openat resumed>) = 4 [pid 5831] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./37/binderfs" [pid 6027] <... mount resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6027] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6027] <... openat resumed>) = 3 [pid 6027] chdir("./file1" [pid 5831] <... umount2 resumed>) = 0 [pid 6026] <... sync resumed>) = 0 [pid 6027] <... chdir resumed>) = 0 [pid 6026] exit_group(0 [pid 6027] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6026] <... exit_group resumed>) = ? [pid 6028] <... creat resumed>) = 5 [pid 6027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6028] sync( [pid 6027] chdir("./file0" [pid 6026] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6029] <... write resumed>) = 524288 [pid 6027] <... chdir resumed>) = 0 [pid 5831] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6027] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6029] <... munmap resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./37/file1", [pid 6029] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6029] ioctl(4, LOOP_SET_FD, 3 [pid 6027] <... openat resumed>) = 4 [pid 5833] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] <... ioctl resumed>) = 0 [pid 6028] <... sync resumed>) = 0 [pid 6027] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6028] exit_group(0 [pid 5831] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6029] close(3 [pid 6028] <... exit_group resumed>) = ? [pid 5833] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6028] +++ exited with 0 +++ [pid 6029] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 4 [pid 5833] newfstatat(3, "", [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] newfstatat(4, "", [pid 6029] close(4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5832] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... openat resumed>) = 3 [pid 5831] getdents64(4, [pid 5832] newfstatat(3, "", [pid 6029] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6029] mkdir("./file1", 0777 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] close(4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 6029] <... mkdir resumed>) = 0 [pid 6027] <... creat resumed>) = 5 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] rmdir("./37/file1" [pid 6027] sync( [pid 5833] getdents64(3, [pid 5832] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5832] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./38/binderfs" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5832] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] rmdir("./37" [pid 6029] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6029] chdir("./file1" [pid 5831] <... rmdir resumed>) = 0 [pid 6029] <... chdir resumed>) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] unlink("./37/binderfs" [pid 5832] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./38", 0777 [pid 6029] chdir("./file0" [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6027] <... sync resumed>) = 0 [pid 5833] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./38/file1", [pid 5831] <... mkdir resumed>) = 0 [pid 6027] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6027] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6029] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6029] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6027] +++ exited with 0 +++ [pid 5833] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(4, "", [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6029] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./37/file1", [pid 5832] getdents64(4, [ 72.484972][ T6029] loop1: detected capacity change from 0 to 1024 [pid 5831] close(3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6029] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] rmdir("./38/file1") = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] getdents64(3, [pid 5833] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] rmdir("./38" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] mkdir("./39", 0777 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6029] <... creat resumed>) = 5 [pid 5833] close(4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6030 attached [pid 6029] sync( [pid 5833] <... close resumed>) = 0 [pid 5829] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./37/file1" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6030] set_robust_list(0x555557df1660, 24 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6030] <... set_robust_list resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] getdents64(3, [pid 5829] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6030] chdir("./38" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6030 [pid 6030] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 5832] close(3) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... close resumed>) = 0 [pid 6030] <... prctl resumed>) = 0 [pid 5833] rmdir("./37" [pid 6030] setpgid(0, 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6030] <... setpgid resumed>) = 0 [pid 5833] mkdir("./38", 0777 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... mkdir resumed>) = 0 [pid 6030] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6030] write(3, "1000", 4 [pid 5833] <... ioctl resumed>) = 0 [pid 6030] <... write resumed>) = 4 [pid 5833] close(3 [pid 6030] close(3 [pid 5829] newfstatat(3, "", [pid 6030] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6030] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5829] getdents64(3, [pid 6030] write(1, "executing program\n", 18) = 18 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6031 attached [pid 6030] memfd_create("syzkaller", 0) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6031 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6031] set_robust_list(0x555557df1660, 24 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6031] <... set_robust_list resumed>) = 0 [pid 6030] <... mmap resumed>) = 0x7fd6d9800000 [pid 6031] chdir("./39" [pid 5829] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6031] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./37/binderfs", [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6029] <... sync resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] exit_group(0 [pid 5829] unlink("./37/binderfs" [pid 6031] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6032 attached [pid 6031] setpgid(0, 0 [pid 6029] <... exit_group resumed>) = ? [pid 5829] <... unlink resumed>) = 0 [pid 6031] <... setpgid resumed>) = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6031] <... openat resumed>) = 3 [pid 6031] write(3, "1000", 4) = 4 [pid 6031] close(3) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6031] write(1, "executing program\n", 18) = 18 [pid 6031] memfd_create("syzkaller", 0 [pid 6032] set_robust_list(0x555557df1660, 24 [pid 6031] <... memfd_create resumed>) = 3 [pid 6030] <... write resumed>) = 524288 [pid 6029] +++ exited with 0 +++ [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6032 [pid 6032] <... set_robust_list resumed>) = 0 [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6032] chdir("./38" [pid 6030] munmap(0x7fd6d9800000, 138412032 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... chdir resumed>) = 0 [pid 6031] <... mmap resumed>) = 0x7fd6d9800000 [pid 6030] <... munmap resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] setpgid(0, 0) = 0 [pid 5829] newfstatat(AT_FDCWD, "./37/file1", [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6030] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... restart_syscall resumed>) = 0 [pid 6032] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6032] write(3, "1000", 4 [pid 5829] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... write resumed>) = 4 [pid 6030] <... openat resumed>) = 4 [pid 6032] close(3 [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 6032] <... close resumed>) = 0 [pid 6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6032] write(1, "executing program\n", 18) = 18 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(4, "", [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 6030] <... ioctl resumed>) = 0 [pid 6030] close(3 [pid 6032] <... write resumed>) = 524288 [pid 6031] <... write resumed>) = 524288 [pid 5830] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6032] munmap(0x7fd6d9800000, 138412032 [pid 6031] munmap(0x7fd6d9800000, 138412032 [pid 6030] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] close(4 [pid 6032] <... munmap resumed>) = 0 [pid 6031] <... munmap resumed>) = 0 [pid 6030] close(4 [pid 5830] unlink("./37/binderfs" [pid 5829] <... close resumed>) = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6031] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6030] <... close resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] rmdir("./37/file1" [pid 6032] <... openat resumed>) = 4 [pid 6031] <... openat resumed>) = 4 [pid 6030] mkdir("./file1", 0777 [ 72.618091][ T6030] loop2: detected capacity change from 0 to 1024 [pid 5830] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... rmdir resumed>) = 0 [pid 6031] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] getdents64(3, [pid 6032] ioctl(4, LOOP_SET_FD, 3 [pid 6030] <... mkdir resumed>) = 0 [pid 6031] <... ioctl resumed>) = 0 [pid 5830] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6031] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(3) = 0 [pid 5830] newfstatat(AT_FDCWD, "./37/file1", [pid 5829] rmdir("./37" [pid 6030] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... rmdir resumed>) = 0 [pid 6031] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] mkdir("./38", 0777 [pid 6031] close(4 [pid 5830] umount2("./37/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... ioctl resumed>) = 0 [pid 6031] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... mkdir resumed>) = 0 [pid 6032] close(3 [pid 6031] mkdir("./file1", 0777 [pid 5830] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6032] <... close resumed>) = 0 [pid 6031] <... mkdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 3 [pid 5830] newfstatat(4, "", [pid 6032] close(4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6032] <... close resumed>) = 0 [pid 6031] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] getdents64(4, [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6032] mkdir("./file1", 0777 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6032] <... mkdir resumed>) = 0 [pid 6030] <... mount resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5829] close(3 [pid 6030] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] rmdir("./37/file1" [pid 6032] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6030] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 6030] chdir("./file1") = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] getdents64(3, [pid 6030] chdir("./file0" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./37" [pid 6030] <... chdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] mkdir("./38", 0777 [pid 6032] <... mount resumed>) = 0 [pid 6031] <... mount resumed>) = 0 [pid 6030] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6032] <... openat resumed>) = 3 [pid 6031] <... openat resumed>) = 3 [pid 6030] <... openat resumed>) = 4 [pid 6032] chdir("./file1") = 0 [ 72.673404][ T6031] loop3: detected capacity change from 0 to 1024 [ 72.680053][ T6032] loop4: detected capacity change from 0 to 1024 [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6030] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6032] chdir("./file0" [pid 6031] chdir("./file1" [pid 5830] <... mkdir resumed>) = 0 [pid 6031] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6033 ./strace-static-x86_64: Process 6033 attached [pid 6031] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 6031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6032] <... chdir resumed>) = 0 [pid 6031] chdir("./file0" [pid 5830] <... ioctl resumed>) = 0 [pid 6032] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] close(3 [pid 6033] set_robust_list(0x555557df1660, 24 [pid 6030] <... creat resumed>) = 5 [pid 6033] <... set_robust_list resumed>) = 0 [pid 6032] <... openat resumed>) = 4 [pid 6031] <... chdir resumed>) = 0 [pid 6030] sync( [pid 6033] chdir("./38" [pid 6031] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... close resumed>) = 0 [pid 6032] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6031] <... openat resumed>) = 4 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6034 attached [pid 6033] <... chdir resumed>) = 0 [pid 6032] <... creat resumed>) = 5 [pid 6031] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6034 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6034] set_robust_list(0x555557df1660, 24 [pid 6033] <... prctl resumed>) = 0 [pid 6034] <... set_robust_list resumed>) = 0 [pid 6034] chdir("./38" [pid 6033] setpgid(0, 0 [pid 6032] sync( [pid 6033] <... setpgid resumed>) = 0 [pid 6034] <... chdir resumed>) = 0 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6034] setpgid(0, 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] <... creat resumed>) = 5 [pid 6034] <... setpgid resumed>) = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] sync( [pid 6034] <... openat resumed>) = 3 [pid 6034] write(3, "1000", 4 [pid 6033] <... openat resumed>) = 3 [pid 6033] write(3, "1000", 4 [pid 6032] <... sync resumed>) = 0 [pid 6031] <... sync resumed>) = 0 [pid 6030] <... sync resumed>) = 0 [pid 6034] <... write resumed>) = 4 [pid 6033] <... write resumed>) = 4 [pid 6030] exit_group(0 [pid 6034] close(3) = 0 [pid 6033] close(3 [pid 6032] exit_group(0 [pid 6031] exit_group(0 [pid 6030] <... exit_group resumed>) = ? [pid 6034] symlink("/dev/binderfs", "./binderfs" [pid 6033] <... close resumed>) = 0 [pid 6032] <... exit_group resumed>) = ? [pid 6031] <... exit_group resumed>) = ? [pid 6030] +++ exited with 0 +++ [pid 6033] symlink("/dev/binderfs", "./binderfs"executing program [pid 6034] <... symlink resumed>) = 0 [pid 6033] <... symlink resumed>) = 0 [pid 6031] +++ exited with 0 +++ [pid 6034] write(1, "executing program\n", 18 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6034] <... write resumed>) = 18 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6032] +++ exited with 0 +++ [pid 6034] <... mmap resumed>) = 0x7fd6d9800000 executing program [pid 6033] write(1, "executing program\n", 18) = 18 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6032, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6033] memfd_create("syzkaller", 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6033] <... memfd_create resumed>) = 3 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5832] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6034] <... write resumed>) = 524288 [pid 5833] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6034] munmap(0x7fd6d9800000, 138412032 [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] getdents64(3, [pid 5832] newfstatat(3, "", [pid 5831] newfstatat(3, "", [pid 6034] <... munmap resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6034] <... openat resumed>) = 4 [pid 5831] getdents64(3, [pid 6034] ioctl(4, LOOP_SET_FD, 3 [pid 5833] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./38/binderfs") = 0 [pid 5833] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... ioctl resumed>) = 0 [pid 6033] <... write resumed>) = 524288 [pid 5832] getdents64(3, [pid 5831] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] <... close resumed>) = 0 [pid 6033] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./38/binderfs", [pid 6034] close(4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6034] <... close resumed>) = 0 [pid 5833] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./38/binderfs" [pid 6034] mkdir("./file1", 0777 [pid 6033] <... munmap resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 6034] <... mkdir resumed>) = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./38/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6033] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6034] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] unlink("./39/binderfs" [pid 5831] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6033] ioctl(4, LOOP_SET_FD, 3 [pid 5833] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... unlink resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 6034] <... mount resumed>) = 0 [pid 6033] <... ioctl resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 6034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 6034] chdir("./file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] newfstatat(AT_FDCWD, "./38/file1", [pid 6034] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] close(4 [pid 6034] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5831] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6033] close(3) = 0 [pid 6033] close(4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] rmdir("./38/file1" [pid 6033] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6033] mkdir("./file1", 0777) = 0 [pid 5831] <... openat resumed>) = 4 [pid 6034] <... chdir resumed>) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(4, "", [pid 6034] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6033] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] close(3 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 5833] rmdir("./38" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6034] <... openat resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] getdents64(4, [pid 6033] <... mount resumed>) = 0 [pid 5832] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] mkdir("./39", 0777 [pid 5831] close(4 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./38/file1") = 0 [pid 5831] getdents64(3, [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] rmdir("./38" [pid 5833] <... ioctl resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./39/file1", [pid 5831] <... rmdir resumed>) = 0 [pid 6033] <... openat resumed>) = 3 [pid 5833] close(3 [pid 6033] chdir("./file1" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6033] <... chdir resumed>) = 0 [pid 6034] <... creat resumed>) = 5 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./39", 0777 [pid 6033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.819312][ T6034] loop1: detected capacity change from 0 to 1024 [ 72.849088][ T6033] loop0: detected capacity change from 0 to 1024 [pid 6033] chdir("./file0" [pid 5832] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6034] sync( [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5832] <... openat resumed>) = 4 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... ioctl resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5831] close(3./strace-static-x86_64: Process 6035 attached [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6035 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6035] set_robust_list(0x555557df1660, 24 [pid 5832] getdents64(4, [pid 6035] <... set_robust_list resumed>) = 0 [pid 6035] chdir("./39") = 0 [pid 6033] <... chdir resumed>) = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 [pid 6035] symlink("/dev/binderfs", "./binderfs" [pid 6033] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6035] <... symlink resumed>) = 0 [pid 6033] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 executing program [pid 6035] write(1, "executing program\n", 18 [pid 5832] getdents64(4, ./strace-static-x86_64: Process 6036 attached [pid 6035] <... write resumed>) = 18 [pid 6033] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6036] set_robust_list(0x555557df1660, 24 [pid 6035] memfd_create("syzkaller", 0 [pid 6033] <... creat resumed>) = 5 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 6036] <... set_robust_list resumed>) = 0 [pid 6033] sync( [pid 5832] <... close resumed>) = 0 [pid 6036] chdir("./39" [pid 6035] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./39/file1" [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6036 [pid 6035] <... mmap resumed>) = 0x7fd6d9800000 [pid 6036] <... chdir resumed>) = 0 [pid 6034] <... sync resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6034] exit_group(0 [pid 5832] getdents64(3, [pid 6036] <... prctl resumed>) = 0 [pid 6034] <... exit_group resumed>) = ? [pid 6036] setpgid(0, 0 [pid 6034] +++ exited with 0 +++ [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6036] <... setpgid resumed>) = 0 [pid 5832] close(3 [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6034, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./39" [pid 6036] <... openat resumed>) = 3 [pid 5830] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6036] write(3, "1000", 4 [pid 5832] mkdir("./40", 0777 [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... mkdir resumed>) = 0 [pid 6036] <... write resumed>) = 4 [pid 6036] close(3) = 0 [pid 6036] symlink("/dev/binderfs", "./binderfs" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 executing program [pid 6036] <... symlink resumed>) = 0 [pid 6033] <... sync resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6036] write(1, "executing program\n", 18 [pid 6033] exit_group(0 [pid 6036] <... write resumed>) = 18 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./38/binderfs", [pid 6036] memfd_create("syzkaller", 0 [pid 6033] <... exit_group resumed>) = ? [pid 5832] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6036] <... memfd_create resumed>) = 3 [pid 5830] unlink("./38/binderfs") = 0 [pid 5830] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6035] <... write resumed>) = 524288 [pid 5832] <... close resumed>) = 0 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6035] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6036] <... mmap resumed>) = 0x7fd6d9800000 [pid 6033] +++ exited with 0 +++ [pid 6035] <... openat resumed>) = 4 [pid 6035] ioctl(4, LOOP_SET_FD, 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... umount2 resumed>) = 0 [pid 5829] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(3, "", [pid 5830] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6037 attached [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6037 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5830] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... openat resumed>) = 4 [pid 5829] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6037] set_robust_list(0x555557df1660, 24 [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(AT_FDCWD, "./38/binderfs", [pid 6037] <... set_robust_list resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6037] chdir("./40" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] unlink("./38/binderfs" [pid 6037] <... chdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... unlink resumed>) = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6037] <... prctl resumed>) = 0 [pid 5830] close(4 [pid 6037] setpgid(0, 0 [pid 5830] <... close resumed>) = 0 [pid 6037] <... setpgid resumed>) = 0 [pid 5830] rmdir("./38/file1"executing program [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... rmdir resumed>) = 0 [pid 6037] <... openat resumed>) = 3 [pid 5830] getdents64(3, [pid 6037] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6037] <... write resumed>) = 4 [pid 5830] close(3 [pid 6037] close(3 [pid 5830] <... close resumed>) = 0 [pid 6037] <... close resumed>) = 0 [pid 5830] rmdir("./38" [pid 6037] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... rmdir resumed>) = 0 [pid 6037] <... symlink resumed>) = 0 [pid 6037] write(1, "executing program\n", 18 [pid 5830] mkdir("./39", 0777 [pid 6037] <... write resumed>) = 18 [pid 6036] <... write resumed>) = 524288 [pid 6035] <... ioctl resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6036] munmap(0x7fd6d9800000, 138412032 [pid 6035] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... umount2 resumed>) = 0 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6035] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6037] <... mmap resumed>) = 0x7fd6d9800000 [pid 6036] <... munmap resumed>) = 0 [ 72.979281][ T6035] loop4: detected capacity change from 0 to 1024 [pid 6035] close(4 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6036] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6035] <... close resumed>) = 0 [pid 6035] mkdir("./file1", 0777 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] <... openat resumed>) = 4 [pid 6036] ioctl(4, LOOP_SET_FD, 3 [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6036] <... ioctl resumed>) = 0 [pid 6035] <... mkdir resumed>) = 0 [pid 5830] close(3 [pid 5829] newfstatat(AT_FDCWD, "./38/file1", [pid 6035] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./38/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] <... close resumed>) = 0 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 6036] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6036] <... close resumed>) = 0 [pid 6036] close(4 [pid 5829] getdents64(4, [pid 6036] <... close resumed>) = 0 [pid 6036] mkdir("./file1", 0777) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6035] <... mount resumed>) = 0 [pid 6036] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, ""./strace-static-x86_64: Process 6038 attached [pid 6035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] close(4 [pid 6035] <... openat resumed>) = 3 [pid 6038] set_robust_list(0x555557df1660, 24 [pid 6035] chdir("./file1" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6038 [pid 5829] <... close resumed>) = 0 [pid 6038] <... set_robust_list resumed>) = 0 [pid 6035] <... chdir resumed>) = 0 [pid 5829] rmdir("./38/file1" [pid 6038] chdir("./39" [pid 6037] <... write resumed>) = 524288 [pid 6036] <... mount resumed>) = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 6038] <... chdir resumed>) = 0 [pid 6037] munmap(0x7fd6d9800000, 138412032 [pid 6036] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6036] <... openat resumed>) = 3 [pid 6035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] getdents64(3, [pid 6038] <... prctl resumed>) = 0 [pid 6037] <... munmap resumed>) = 0 [pid 6036] chdir("./file1" [pid 6035] chdir("./file0" [pid 6038] setpgid(0, 0 [pid 6037] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6036] <... chdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6038] <... setpgid resumed>) = 0 [pid 6037] <... openat resumed>) = 4 [pid 6036] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] close(3 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] ioctl(4, LOOP_SET_FD, 3 [pid 6036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6035] <... chdir resumed>) = 0 [pid 6036] chdir("./file0") = 0 [pid 6038] <... openat resumed>) = 3 [pid 6037] <... ioctl resumed>) = 0 [pid 6035] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] <... close resumed>) = 0 [pid 6038] write(3, "1000", 4 [pid 6037] close(3 [pid 6035] <... openat resumed>) = 4 [pid 5829] rmdir("./38" [pid 6038] <... write resumed>) = 4 [pid 6037] <... close resumed>) = 0 [pid 6036] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6035] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6037] close(4 [pid 6036] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 6038] close(3 [pid 6037] <... close resumed>) = 0 [pid 6038] <... close resumed>) = 0 [pid 6037] mkdir("./file1", 0777 [pid 6038] symlink("/dev/binderfs", "./binderfs" [pid 6035] <... creat resumed>) = 5 [pid 5829] mkdir("./39", 0777executing program [pid 6037] <... mkdir resumed>) = 0 [pid 6038] <... symlink resumed>) = 0 [pid 6036] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... mkdir resumed>) = 0 [pid 6035] sync( [pid 6038] write(1, "executing program\n", 18 [pid 6037] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6038] <... write resumed>) = 18 [pid 6038] memfd_create("syzkaller", 0 [pid 6036] <... creat resumed>) = 5 [pid 5829] <... openat resumed>) = 3 [pid 6038] <... memfd_create resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6038] <... mmap resumed>) = 0x7fd6d9800000 [pid 6036] sync( [ 73.024541][ T6036] loop2: detected capacity change from 0 to 1024 [ 73.063606][ T6037] loop3: detected capacity change from 0 to 1024 [pid 5829] close(3 [pid 6038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... close resumed>) = 0 [pid 6037] <... mount resumed>) = 0 [pid 6037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6037] <... openat resumed>) = 3 [pid 6037] chdir("./file1"./strace-static-x86_64: Process 6039 attached ) = 0 [pid 6039] set_robust_list(0x555557df1660, 24) = 0 [pid 6039] chdir("./39" [pid 6037] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6039] <... chdir resumed>) = 0 [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6039] setpgid(0, 0) = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6037] chdir("./file0" [pid 6039] <... openat resumed>) = 3 [pid 6039] write(3, "1000", 4) = 4 [pid 6038] <... write resumed>) = 524288 [pid 6037] <... chdir resumed>) = 0 [pid 6036] <... sync resumed>) = 0 [pid 6035] <... sync resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6039 [pid 6039] close(3 [pid 6036] exit_group(0 [pid 6039] <... close resumed>) = 0 [pid 6037] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6036] <... exit_group resumed>) = ? [pid 6035] exit_group(0 [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 6038] munmap(0x7fd6d9800000, 138412032 [pid 6037] <... openat resumed>) = 4 [pid 6036] +++ exited with 0 +++ [pid 6035] <... exit_group resumed>) = ? [pid 6038] <... munmap resumed>) = 0 [pid 6037] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6035] +++ exited with 0 +++ [pid 6038] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6036, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6038] <... openat resumed>) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3 [pid 6039] <... symlink resumed>) = 0 [pid 6039] write(1, "executing program\n", 18 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(3, "", [pid 5833] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 6039] <... write resumed>) = 18 [pid 6037] <... creat resumed>) = 5 [pid 5833] newfstatat(3, "", [pid 5831] getdents64(3, [pid 6039] memfd_create("syzkaller", 0 [pid 6037] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6039] <... memfd_create resumed>) = 3 [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] getdents64(3, [pid 5831] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6039] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5831] unlink("./39/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./39/binderfs" [pid 6039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] <... ioctl resumed>) = 0 [pid 6039] <... write resumed>) = 524288 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6039] munmap(0x7fd6d9800000, 138412032 [pid 6038] close(3 [pid 5833] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 73.138734][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 73.138751][ T29] audit: type=1800 audit(1730647672.777:200): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [ 73.150753][ T6038] loop1: detected capacity change from 0 to 1024 [pid 6039] <... munmap resumed>) = 0 [pid 6038] close(4 [pid 5833] newfstatat(AT_FDCWD, "./39/file1", [pid 5831] newfstatat(AT_FDCWD, "./39/file1", [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6038] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6039] <... openat resumed>) = 4 [pid 6038] mkdir("./file1", 0777 [pid 5833] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6039] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] <... ioctl resumed>) = 0 [pid 6038] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6039] close(3 [pid 6038] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6037] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] <... close resumed>) = 0 [pid 6037] exit_group(0 [pid 5833] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6037] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5833] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6037] +++ exited with 0 +++ [pid 5833] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./39/file1" [pid 6039] close(4 [pid 6038] <... mount resumed>) = 0 [pid 5833] close(4 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... rmdir resumed>) = 0 [pid 6039] <... close resumed>) = 0 [pid 6038] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(3, [pid 6039] mkdir("./file1", 0777 [pid 5833] rmdir("./39/file1" [pid 6038] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6038] chdir("./file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5831] close(3 [pid 6038] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./39" [pid 6039] <... mkdir resumed>) = 0 [pid 6038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 6038] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5831] mkdir("./40", 0777 [pid 6039] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6038] <... chdir resumed>) = 0 [pid 5833] rmdir("./39" [pid 5832] <... restart_syscall resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] mkdir("./40", 0777 [pid 5832] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] <... openat resumed>) = 4 [ 73.204526][ T6039] loop0: detected capacity change from 0 to 1024 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6039] <... mount resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 3 [pid 6039] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 6039] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 6039] chdir("./file1" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6039] <... chdir resumed>) = 0 [pid 5832] getdents64(3, [pid 6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6038] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6039] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6039] chdir("./file0" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] <... chdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./40/binderfs", [pid 6039] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6039] <... openat resumed>) = 4 [pid 5832] unlink("./40/binderfs" [pid 6039] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6038] <... creat resumed>) = 5 [pid 5832] <... unlink resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] sync( [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3) = 0 [pid 6039] <... creat resumed>) = 5 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... umount2 resumed>) = 0 [pid 6039] sync( [pid 5833] <... ioctl resumed>) = 0 [pid 5832] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6040 [pid 5833] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./40/file1", ./strace-static-x86_64: Process 6040 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6040] set_robust_list(0x555557df1660, 24 [pid 6038] <... sync resumed>) = 0 [pid 6040] <... set_robust_list resumed>) = 0 [pid 6038] exit_group(0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] <... exit_group resumed>) = ? [pid 6040] chdir("./40" [pid 6038] +++ exited with 0 +++ [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 73.245500][ T29] audit: type=1800 audit(1730647672.887:201): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5832] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6039] <... sync resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6038, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6039] exit_group(0 [pid 5832] <... openat resumed>) = 4 [pid 5830] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6040] <... chdir resumed>) = 0 [pid 6039] <... exit_group resumed>) = ? [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6041 attached [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6039] +++ exited with 0 +++ [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6041 [pid 5832] newfstatat(4, "", [pid 5830] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] set_robust_list(0x555557df1660, 24 [pid 6040] <... prctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6041] <... set_robust_list resumed>) = 0 [pid 6040] setpgid(0, 0 [pid 5832] getdents64(4, [pid 5830] <... openat resumed>) = 3 [pid 6040] <... setpgid resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] newfstatat(3, "", [pid 6041] chdir("./40" [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 6040] <... openat resumed>) = 3 [pid 5832] close(4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... close resumed>) = 0 [pid 5830] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./40/file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5832] <... rmdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(3, [pid 5829] unlink("./39/binderfs") = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6040] write(3, "1000", 4 [ 73.299811][ T29] audit: type=1800 audit(1730647672.907:202): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5832] close(3 [pid 5830] unlink("./39/binderfs" [pid 5829] <... umount2 resumed>) = 0 [pid 6041] <... chdir resumed>) = 0 [pid 6040] <... write resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5829] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6040] close(3 [pid 5832] rmdir("./40" [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... prctl resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6041] setpgid(0, 0 [pid 6040] <... close resumed>) = 0 [pid 5832] mkdir("./41", 0777 [pid 6041] <... setpgid resumed>) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... mkdir resumed>) = 0 [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6040] <... symlink resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... openat resumed>) = 3 executing program [pid 6040] write(1, "executing program\n", 18 [pid 5832] <... openat resumed>) = 3 [pid 5830] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6041] write(3, "1000", 4 [pid 6040] <... write resumed>) = 18 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] <... write resumed>) = 4 [pid 6040] memfd_create("syzkaller", 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./39/file1", [pid 5829] <... openat resumed>) = 4 [pid 5832] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(4, "", [pid 5830] umount2("./39/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(4, [pid 5830] <... openat resumed>) = 4 [pid 5830] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5830] close(4 [pid 5829] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./39/file1" [pid 5832] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] rmdir("./39/file1" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 6041] close(3 [pid 5830] rmdir("./39" [pid 5829] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x555557df1660, 24 [pid 6041] <... close resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6042 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, [pid 6041] symlink("/dev/binderfs", "./binderfs" [pid 6042] <... set_robust_list resumed>) = 0 [pid 6041] <... symlink resumed>) = 0 [pid 6040] <... memfd_create resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6042] chdir("./41" [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] mkdir("./40", 0777 [pid 6042] <... chdir resumed>) = 0 [pid 6041] write(1, "executing program\n", 18 [pid 6040] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] close(3 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6041] <... write resumed>) = 18 [pid 5829] <... close resumed>) = 0 [pid 6041] memfd_create("syzkaller", 0 [pid 5829] rmdir("./39" [pid 6042] <... prctl resumed>) = 0 [pid 6041] <... memfd_create resumed>) = 3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6041] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... openat resumed>) = 3 executing program [pid 5829] mkdir("./40", 0777 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6042] <... openat resumed>) = 3 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6042] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6042] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... ioctl resumed>) = 0 [pid 6042] <... symlink resumed>) = 0 [pid 5829] close(3 [pid 6042] write(1, "executing program\n", 18 [pid 6040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288executing program [pid 6042] <... write resumed>) = 18 [pid 6042] memfd_create("syzkaller", 0 [pid 5829] <... close resumed>) = 0 [pid 6042] <... memfd_create resumed>) = 3 [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... close resumed>) = 0 [pid 6040] <... write resumed>) = 524288 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6043 attached , child_tidptr=0x555557df1650) = 6043 [pid 6043] set_robust_list(0x555557df1660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6044 [pid 6043] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6044 attached [pid 6043] chdir("./40" [pid 6040] munmap(0x7fd6d9800000, 138412032 [pid 6043] <... chdir resumed>) = 0 [pid 6044] set_robust_list(0x555557df1660, 24 [pid 6042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6041] <... write resumed>) = 524288 [pid 6040] <... munmap resumed>) = 0 [pid 6044] <... set_robust_list resumed>) = 0 [pid 6040] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6044] chdir("./40" [pid 6043] <... prctl resumed>) = 0 [pid 6042] <... write resumed>) = 524288 [pid 6040] <... openat resumed>) = 4 [pid 6044] <... chdir resumed>) = 0 [pid 6043] setpgid(0, 0executing program [pid 6040] ioctl(4, LOOP_SET_FD, 3 [pid 6044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6043] <... setpgid resumed>) = 0 [pid 6041] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs" [pid 6042] munmap(0x7fd6d9800000, 138412032 [pid 6043] <... symlink resumed>) = 0 [pid 6042] <... munmap resumed>) = 0 [pid 6043] write(1, "executing program\n", 18 [pid 6042] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6043] <... write resumed>) = 18 [pid 6042] <... openat resumed>) = 4 [pid 6044] <... prctl resumed>) = 0 [pid 6044] setpgid(0, 0 [pid 6043] memfd_create("syzkaller", 0 [pid 6042] ioctl(4, LOOP_SET_FD, 3 [pid 6044] <... setpgid resumed>) = 0 [pid 6043] <... memfd_create resumed>) = 3 [pid 6044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6044] <... openat resumed>) = 3 [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6042] <... ioctl resumed>) = 0 [pid 6041] <... ioctl resumed>) = 0 [pid 6040] <... ioctl resumed>) = 0 [pid 6044] write(3, "1000", 4) = 4 [pid 6044] close(3 [pid 6042] close(3 [pid 6041] close(3 [pid 6040] close(3 [pid 6044] <... close resumed>) = 0 [pid 6042] <... close resumed>) = 0 [pid 6041] <... close resumed>) = 0 [pid 6040] <... close resumed>) = 0 [pid 6044] symlink("/dev/binderfs", "./binderfs" [pid 6042] close(4 [pid 6041] close(4 [pid 6040] close(4 [pid 6044] <... symlink resumed>) = 0 [pid 6040] <... close resumed>) = 0 [ 73.432742][ T6041] loop4: detected capacity change from 0 to 1024 [ 73.432812][ T6040] loop2: detected capacity change from 0 to 1024 [ 73.446810][ T6042] loop3: detected capacity change from 0 to 1024 executing program [pid 6043] <... write resumed>) = 524288 [pid 6044] write(1, "executing program\n", 18 [pid 6042] <... close resumed>) = 0 [pid 6041] <... close resumed>) = 0 [pid 6040] mkdir("./file1", 0777 [pid 6044] <... write resumed>) = 18 [pid 6041] mkdir("./file1", 0777 [pid 6040] <... mkdir resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0 [pid 6042] mkdir("./file1", 0777 [pid 6041] <... mkdir resumed>) = 0 [pid 6040] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6044] <... memfd_create resumed>) = 3 [pid 6041] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6043] munmap(0x7fd6d9800000, 138412032 [pid 6042] <... mkdir resumed>) = 0 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6043] <... munmap resumed>) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6044] <... mmap resumed>) = 0x7fd6d9800000 [pid 6042] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6043] <... openat resumed>) = 4 [pid 6043] ioctl(4, LOOP_SET_FD, 3 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6043] <... ioctl resumed>) = 0 [pid 6042] <... mount resumed>) = 0 [pid 6041] <... mount resumed>) = 0 [pid 6040] <... mount resumed>) = 0 [pid 6042] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6041] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6040] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6044] <... write resumed>) = 524288 [pid 6043] close(3 [pid 6042] <... openat resumed>) = 3 [pid 6041] <... openat resumed>) = 3 [pid 6040] <... openat resumed>) = 3 [pid 6044] munmap(0x7fd6d9800000, 138412032 [pid 6043] <... close resumed>) = 0 [pid 6042] chdir("./file1" [pid 6041] chdir("./file1" [pid 6040] chdir("./file1" [pid 6044] <... munmap resumed>) = 0 [pid 6043] close(4 [pid 6042] <... chdir resumed>) = 0 [pid 6041] <... chdir resumed>) = 0 [pid 6040] <... chdir resumed>) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6042] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6041] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6040] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6044] <... openat resumed>) = 4 [pid 6043] <... close resumed>) = 0 [pid 6042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6042] chdir("./file0" [pid 6041] chdir("./file0" [pid 6040] chdir("./file0" [pid 6044] ioctl(4, LOOP_SET_FD, 3 [ 73.497231][ T6043] loop0: detected capacity change from 0 to 1024 [ 73.527680][ T6044] loop1: detected capacity change from 0 to 1024 [pid 6043] mkdir("./file1", 0777 [pid 6040] <... chdir resumed>) = 0 [pid 6040] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6044] <... ioctl resumed>) = 0 [pid 6044] close(3) = 0 [pid 6044] close(4) = 0 [pid 6044] mkdir("./file1", 0777) = 0 [pid 6043] <... mkdir resumed>) = 0 [pid 6042] <... chdir resumed>) = 0 [pid 6040] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6043] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6042] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6041] <... chdir resumed>) = 0 [pid 6041] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6044] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6043] <... mount resumed>) = 0 [pid 6042] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6040] <... creat resumed>) = 5 [pid 6043] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6041] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6040] sync( [pid 6043] <... openat resumed>) = 3 [pid 6043] chdir("./file1") = 0 [ 73.537202][ T29] audit: type=1800 audit(1730647673.177:203): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6043] chdir("./file0") = 0 [pid 6043] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6043] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6043] sync( [pid 6042] <... creat resumed>) = 5 [pid 6044] <... mount resumed>) = 0 [pid 6042] sync( [pid 6041] <... creat resumed>) = 5 [pid 6044] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6041] sync( [pid 6044] <... openat resumed>) = 3 [pid 6044] chdir("./file1") = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6044] chdir("./file0") = 0 [pid 6044] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6044] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [ 73.582682][ T29] audit: type=1800 audit(1730647673.207:204): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [ 73.605607][ T29] audit: type=1800 audit(1730647673.207:205): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 6044] sync() = 0 [pid 6043] <... sync resumed>) = 0 [pid 6042] <... sync resumed>) = 0 [pid 6041] <... sync resumed>) = 0 [pid 6040] <... sync resumed>) = 0 [pid 6044] exit_group(0 [pid 6043] exit_group(0 [pid 6042] exit_group(0 [pid 6041] exit_group(0 [pid 6040] exit_group(0 [pid 6044] <... exit_group resumed>) = ? [pid 6043] <... exit_group resumed>) = ? [pid 6042] <... exit_group resumed>) = ? [pid 6040] <... exit_group resumed>) = ? [pid 6041] <... exit_group resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6042] +++ exited with 0 +++ [pid 6040] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6042, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6044, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6041] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6041, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5829] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5833] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5832] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5832] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] unlink("./40/binderfs" [pid 5832] unlink("./41/binderfs" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5832] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./40/binderfs" [pid 5829] unlink("./40/binderfs" [pid 5831] unlink("./40/binderfs" [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5830] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5833] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5831] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [ 73.629912][ T29] audit: type=1800 audit(1730647673.237:206): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [ 73.650246][ T29] audit: type=1800 audit(1730647673.267:207): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5832] newfstatat(AT_FDCWD, "./41/file1", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./40/file1" [pid 5831] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./40/file1", [pid 5833] rmdir("./40" [pid 5829] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] mkdir("./41", 0777 [pid 5832] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./40/file1", [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] close(3 [pid 5832] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] newfstatat(AT_FDCWD, "./40/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(4, [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... close resumed>) = 0 [pid 5831] close(4 [pid 5830] umount2("./40/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5832] rmdir("./41/file1" [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(4 [pid 5833] <... close resumed>) = 0 [pid 5831] rmdir("./40/file1" [pid 5830] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5829] rmdir("./40/file1"./strace-static-x86_64: Process 6045 attached [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6045] set_robust_list(0x555557df1660, 24 [pid 5832] close(3) = 0 [pid 5831] getdents64(3, [pid 5830] getdents64(4, [pid 5832] rmdir("./41" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] close(3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] getdents64(3, [pid 5832] mkdir("./42", 0777 [pid 5831] rmdir("./40" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6045] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6045 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] close(4 [pid 5829] <... close resumed>) = 0 [pid 6045] chdir("./41" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./40" [pid 6045] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6045] <... prctl resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] mkdir("./41", 0777 [pid 5830] rmdir("./40/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 6045] setpgid(0, 0 [pid 5832] close(3 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6045] <... setpgid resumed>) = 0 [pid 5829] mkdir("./41", 0777 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... mkdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] getdents64(3, [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] close(3 [pid 5830] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6045] <... openat resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5830] rmdir("./40" [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6045] write(3, "1000", 4./strace-static-x86_64: Process 6046 attached ) = 4 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6045] close(3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6046 [pid 5829] close(3 [pid 6045] <... close resumed>) = 0 [pid 6045] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... close resumed>) = 0 [pid 6046] set_robust_list(0x555557df1660, 24 [pid 5830] mkdir("./41", 0777 [pid 6046] <... set_robust_list resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6046] chdir("./42") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] <... symlink resumed>) = 0 [pid 6046] <... prctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6046] setpgid(0, 0 [pid 5830] <... openat resumed>) = 3 [pid 6046] <... setpgid resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] ioctl(3, LOOP_CLR_FDexecuting program ./strace-static-x86_64: Process 6047 attached [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6045] write(1, "executing program\n", 18 [pid 5830] <... ioctl resumed>) = 0 [pid 6047] set_robust_list(0x555557df1660, 24 [pid 6045] <... write resumed>) = 18 [pid 6047] <... set_robust_list resumed>) = 0 [pid 6046] <... openat resumed>) = 3 [pid 6045] memfd_create("syzkaller", 0 [pid 5830] close(3 [pid 6047] chdir("./41" [pid 6046] write(3, "1000", 4 [pid 6045] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6047 [pid 6046] <... write resumed>) = 4 ./strace-static-x86_64: Process 6048 attached [pid 6047] <... chdir resumed>) = 0 [pid 6046] close(3 [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] set_robust_list(0x555557df1660, 24) = 0 [pid 6046] <... close resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6048 [pid 6048] chdir("./41" [pid 6047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6046] symlink("/dev/binderfs", "./binderfs" [pid 6045] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 6049 attached [pid 6046] <... symlink resumed>) = 0 [pid 6048] <... chdir resumed>) = 0 [pid 6047] <... prctl resumed>) = 0 [pid 6049] set_robust_list(0x555557df1660, 24 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6046] write(1, "executing program\n", 18executing program [pid 6049] <... set_robust_list resumed>) = 0 [pid 6048] <... prctl resumed>) = 0 [pid 6046] <... write resumed>) = 18 [pid 6047] setpgid(0, 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6049 [pid 6049] chdir("./41" [pid 6047] <... setpgid resumed>) = 0 [pid 6046] memfd_create("syzkaller", 0 [pid 6047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6048] setpgid(0, 0 [pid 6046] <... memfd_create resumed>) = 3 [pid 6048] <... setpgid resumed>) = 0 [pid 6047] <... openat resumed>) = 3 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6049] <... chdir resumed>) = 0 [pid 6047] write(3, "1000", 4 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6048] <... openat resumed>) = 3 [pid 6047] <... write resumed>) = 4 [pid 6049] setpgid(0, 0 [pid 6048] write(3, "1000", 4 [pid 6047] close(3 [pid 6049] <... setpgid resumed>) = 0 [pid 6048] <... write resumed>) = 4 [pid 6047] <... close resumed>) = 0 [pid 6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6048] close(3 [pid 6047] symlink("/dev/binderfs", "./binderfs" [pid 6048] <... close resumed>) = 0 [pid 6049] <... openat resumed>) = 3 [pid 6048] symlink("/dev/binderfs", "./binderfs" [pid 6047] <... symlink resumed>) = 0 [pid 6048] <... symlink resumed>) = 0 [pid 6047] write(1, "executing program\n", 18 [pid 6046] <... write resumed>) = 524288 executing program [pid 6049] write(3, "1000", 4) = 4 [pid 6048] write(1, "executing program\n", 18executing program [pid 6047] <... write resumed>) = 18 [pid 6045] <... write resumed>) = 524288 [pid 6049] close(3 [pid 6048] <... write resumed>) = 18 [pid 6047] memfd_create("syzkaller", 0 [pid 6049] <... close resumed>) = 0 executing program [pid 6049] symlink("/dev/binderfs", "./binderfs" [pid 6048] memfd_create("syzkaller", 0 [pid 6047] <... memfd_create resumed>) = 3 [pid 6046] munmap(0x7fd6d9800000, 138412032 [pid 6045] munmap(0x7fd6d9800000, 138412032 [pid 6049] <... symlink resumed>) = 0 [pid 6048] <... memfd_create resumed>) = 3 [pid 6045] <... munmap resumed>) = 0 [pid 6049] write(1, "executing program\n", 18 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6049] <... write resumed>) = 18 [pid 6048] <... mmap resumed>) = 0x7fd6d9800000 [pid 6047] <... mmap resumed>) = 0x7fd6d9800000 [pid 6046] <... munmap resumed>) = 0 [pid 6045] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6049] memfd_create("syzkaller", 0 [pid 6046] <... openat resumed>) = 4 [pid 6045] ioctl(4, LOOP_SET_FD, 3 [pid 6049] <... memfd_create resumed>) = 3 [pid 6046] ioctl(4, LOOP_SET_FD, 3 [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6049] <... mmap resumed>) = 0x7fd6d9800000 [pid 6047] <... write resumed>) = 524288 [pid 6048] <... write resumed>) = 524288 [pid 6045] <... ioctl resumed>) = 0 [pid 6045] close(3) = 0 [pid 6045] close(4 [pid 6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6048] munmap(0x7fd6d9800000, 138412032 [pid 6047] munmap(0x7fd6d9800000, 138412032 [pid 6046] <... ioctl resumed>) = 0 [pid 6045] <... close resumed>) = 0 [pid 6045] mkdir("./file1", 0777) = 0 [pid 6049] <... write resumed>) = 524288 [pid 6047] <... munmap resumed>) = 0 [pid 6046] close(3 [ 73.839489][ T6045] loop4: detected capacity change from 0 to 1024 [ 73.852207][ T6046] loop3: detected capacity change from 0 to 1024 [pid 6045] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6049] munmap(0x7fd6d9800000, 138412032 [pid 6048] <... munmap resumed>) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6046] <... close resumed>) = 0 [pid 6046] close(4 [pid 6049] <... munmap resumed>) = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6047] <... openat resumed>) = 4 [pid 6046] <... close resumed>) = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6048] <... openat resumed>) = 4 [pid 6047] ioctl(4, LOOP_SET_FD, 3 [pid 6046] mkdir("./file1", 0777 [pid 6049] <... openat resumed>) = 4 [pid 6049] ioctl(4, LOOP_SET_FD, 3 [pid 6048] ioctl(4, LOOP_SET_FD, 3 [pid 6046] <... mkdir resumed>) = 0 [pid 6046] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6049] <... ioctl resumed>) = 0 [pid 6049] close(3 [pid 6047] <... ioctl resumed>) = 0 [pid 6047] close(3) = 0 [pid 6047] close(4) = 0 [pid 6047] mkdir("./file1", 0777 [pid 6049] <... close resumed>) = 0 [pid 6047] <... mkdir resumed>) = 0 [pid 6049] close(4 [pid 6046] <... mount resumed>) = 0 [pid 6049] <... close resumed>) = 0 [pid 6048] <... ioctl resumed>) = 0 [pid 6046] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6048] close(3 [pid 6047] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6049] mkdir("./file1", 0777 [pid 6046] <... openat resumed>) = 3 [pid 6049] <... mkdir resumed>) = 0 [pid 6048] <... close resumed>) = 0 [pid 6046] chdir("./file1" [pid 6049] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6046] <... chdir resumed>) = 0 [pid 6048] close(4 [pid 6046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6048] <... close resumed>) = 0 [pid 6045] <... mount resumed>) = 0 [pid 6048] mkdir("./file1", 0777 [pid 6046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6048] <... mkdir resumed>) = 0 [pid 6046] chdir("./file0" [pid 6045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6049] <... mount resumed>) = 0 [pid 6048] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6046] <... chdir resumed>) = 0 [pid 6045] chdir("./file1" [pid 6049] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6046] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6045] <... chdir resumed>) = 0 [pid 6049] <... openat resumed>) = 3 [pid 6046] <... openat resumed>) = 4 [ 73.889716][ T6047] loop2: detected capacity change from 0 to 1024 [ 73.898017][ T6048] loop0: detected capacity change from 0 to 1024 [ 73.905495][ T6049] loop1: detected capacity change from 0 to 1024 [pid 6046] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6045] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6049] chdir("./file1" [pid 6047] <... mount resumed>) = 0 [pid 6045] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6049] <... chdir resumed>) = 0 [pid 6045] chdir("./file0" [pid 6049] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6046] <... creat resumed>) = 5 [pid 6049] chdir("./file0" [pid 6046] sync( [pid 6045] <... chdir resumed>) = 0 [pid 6045] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6047] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file1") = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6047] chdir("./file0") = 0 [pid 6047] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6049] <... chdir resumed>) = 0 [pid 6047] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6049] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6048] <... mount resumed>) = 0 [pid 6045] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6048] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6048] chdir("./file1") = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6047] <... creat resumed>) = 5 [pid 6047] sync( [pid 6048] chdir("./file0" [pid 6049] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6048] <... chdir resumed>) = 0 [ 73.943277][ T29] audit: type=1800 audit(1730647673.577:208): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 6048] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6048] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6049] <... creat resumed>) = 5 [pid 6048] <... creat resumed>) = 5 [pid 6045] <... creat resumed>) = 5 [pid 6049] sync( [pid 6048] sync( [pid 6049] <... sync resumed>) = 0 [pid 6047] <... sync resumed>) = 0 [pid 6046] <... sync resumed>) = 0 [pid 6045] sync( [pid 6049] exit_group(0 [pid 6047] exit_group(0 [pid 6046] exit_group(0 [pid 6049] <... exit_group resumed>) = ? [pid 6047] <... exit_group resumed>) = ? [pid 6046] <... exit_group resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6047, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6049] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... openat resumed>) = 3 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5832] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6048] <... sync resumed>) = 0 [pid 5831] getdents64(3, [pid 6048] exit_group(0 [pid 6045] <... sync resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 6048] <... exit_group resumed>) = ? [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6045] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6048] +++ exited with 0 +++ [pid 6045] <... exit_group resumed>) = ? [pid 5832] getdents64(3, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./41/binderfs") = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [ 73.993449][ T29] audit: type=1800 audit(1730647673.617:209): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 5831] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6045] +++ exited with 0 +++ [pid 5832] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] unlink("./42/binderfs" [pid 5830] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... unlink resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(3, "", [pid 5832] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] getdents64(3, [pid 5831] newfstatat(AT_FDCWD, "./41/file1", [pid 5830] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5831] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] unlink("./41/binderfs" [pid 5829] unlink("./41/binderfs" [pid 5831] newfstatat(4, "", [pid 5830] <... unlink resumed>) = 0 [pid 5832] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./42/file1", [pid 5831] getdents64(4, [pid 5829] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5832] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] close(4 [pid 5830] <... umount2 resumed>) = 0 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] getdents64(4, [pid 5831] rmdir("./41/file1" [pid 5830] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5829] newfstatat(AT_FDCWD, "./41/file1", [pid 5833] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./41/file1", [pid 5832] rmdir("./42/file1" [pid 5833] unlink("./41/binderfs" [pid 5831] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, [pid 5831] rmdir("./41" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] close(3) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 5832] rmdir("./42" [pid 5830] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] mkdir("./42", 0777 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 5832] mkdir("./43", 0777 [pid 5830] getdents64(4, [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] getdents64(4, [pid 5832] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... mkdir resumed>) = 0 [pid 5830] close(4 [pid 5829] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] newfstatat(AT_FDCWD, "./41/file1", [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] rmdir("./41/file1" [pid 5829] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./41/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... ioctl resumed>) = 0 [pid 5830] getdents64(3, [pid 5829] close(4 [pid 5833] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./41") = 0 [pid 5830] mkdir("./42", 0777 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [pid 5833] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] rmdir("./41/file1" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6051 attached [pid 6050] set_robust_list(0x555557df1660, 24 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6050 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6051 [pid 5829] getdents64(3, [pid 5833] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6051] set_robust_list(0x555557df1660, 24 [pid 6050] <... set_robust_list resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] close(3 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6050] chdir("./43" [pid 5833] getdents64(4, [pid 6051] chdir("./42" [pid 6050] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 executing program [pid 6051] <... chdir resumed>) = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(4 [pid 5830] close(3 [pid 5829] rmdir("./41" [pid 6051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6050] <... prctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6051] <... prctl resumed>) = 0 [pid 6051] setpgid(0, 0) = 0 [pid 6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6051] write(3, "1000", 4) = 4 [pid 6051] close(3) = 0 [pid 6051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6051] write(1, "executing program\n", 18) = 18 [pid 6051] memfd_create("syzkaller", 0) = 3 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6050] setpgid(0, 0 [pid 5833] rmdir("./41/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] mkdir("./42", 0777 [pid 5833] <... rmdir resumed>) = 0 [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6050] <... setpgid resumed>) = 0 [pid 5833] getdents64(3, [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6050] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] rmdir("./41" [pid 6050] write(3, "1000", 4 [pid 5829] <... ioctl resumed>) = 0 [pid 6050] <... write resumed>) = 4 [pid 5829] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6050] close(3 [pid 5833] mkdir("./42", 0777 [pid 6050] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... mkdir resumed>) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs" [pid 6051] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6052 attached [pid 6050] <... symlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6050] write(1, "executing program\n", 18executing program [pid 6051] munmap(0x7fd6d9800000, 138412032 [pid 6050] <... write resumed>) = 18 [pid 6052] set_robust_list(0x555557df1660, 24 [pid 6051] <... munmap resumed>) = 0 [pid 6050] memfd_create("syzkaller", 0 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6052 [pid 6050] <... memfd_create resumed>) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6053 attached [pid 6052] <... set_robust_list resumed>) = 0 [pid 6050] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6053] set_robust_list(0x555557df1660, 24 [pid 6051] <... openat resumed>) = 4 [pid 6053] <... set_robust_list resumed>) = 0 [pid 6051] ioctl(4, LOOP_SET_FD, 3executing program [pid 6053] chdir("./42" [pid 6052] chdir("./42" [pid 6051] <... ioctl resumed>) = 0 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... ioctl resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6053 [pid 6053] <... chdir resumed>) = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6053] write(3, "1000", 4) = 4 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] write(1, "executing program\n", 18) = 18 [pid 6053] memfd_create("syzkaller", 0) = 3 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6052] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6051] close(3 [pid 6050] <... write resumed>) = 524288 [pid 5833] <... close resumed>) = 0 [pid 6052] <... prctl resumed>) = 0 [pid 6050] munmap(0x7fd6d9800000, 138412032 [pid 6052] setpgid(0, 0 [pid 6051] <... close resumed>) = 0 [pid 6050] <... munmap resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6052] <... setpgid resumed>) = 0 [pid 6051] close(4 [pid 6050] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6051] <... close resumed>) = 0 [pid 6050] <... openat resumed>) = 4 [pid 6051] mkdir("./file1", 0777 [pid 6052] <... openat resumed>) = 3 [pid 6051] <... mkdir resumed>) = 0 [pid 6052] write(3, "1000", 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3 [pid 6051] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6052] <... write resumed>) = 4 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6054 attached [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs" [pid 6054] set_robust_list(0x555557df1660, 24 [pid 6052] <... symlink resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6054 [pid 6054] <... set_robust_list resumed>) = 0 [pid 6052] write(1, "executing program\n", 18executing program [pid 6054] chdir("./42" [pid 6052] <... write resumed>) = 18 [pid 6054] <... chdir resumed>) = 0 [pid 6054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6053] <... write resumed>) = 524288 [pid 6052] memfd_create("syzkaller", 0 [pid 6050] <... ioctl resumed>) = 0 [pid 6051] <... mount resumed>) = 0 [pid 6054] <... prctl resumed>) = 0 [pid 6053] munmap(0x7fd6d9800000, 138412032 [pid 6052] <... memfd_create resumed>) = 3 [pid 6050] close(3 [pid 6054] setpgid(0, 0 [pid 6053] <... munmap resumed>) = 0 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6050] <... close resumed>) = 0 [pid 6054] <... setpgid resumed>) = 0 [pid 6052] <... mmap resumed>) = 0x7fd6d9800000 [pid 6051] <... openat resumed>) = 3 [pid 6050] close(4 [pid 6054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6051] chdir("./file1" [pid 6050] <... close resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6051] <... chdir resumed>) = 0 [pid 6050] mkdir("./file1", 0777 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6050] <... mkdir resumed>) = 0 [pid 6051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6050] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6053] <... openat resumed>) = 4 [pid 6051] chdir("./file0" [ 74.184519][ T6051] loop2: detected capacity change from 0 to 1024 [ 74.218192][ T6050] loop3: detected capacity change from 0 to 1024 [pid 6053] ioctl(4, LOOP_SET_FD, 3 [pid 6054] <... openat resumed>) = 3 [pid 6052] <... write resumed>) = 524288 [pid 6054] write(3, "1000", 4 [pid 6051] <... chdir resumed>) = 0 [pid 6054] <... write resumed>) = 4 [pid 6051] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6054] close(3 [pid 6053] <... ioctl resumed>) = 0 [pid 6051] <... openat resumed>) = 4 [pid 6054] <... close resumed>) = 0 [pid 6053] close(3 [pid 6052] munmap(0x7fd6d9800000, 138412032 [pid 6054] symlink("/dev/binderfs", "./binderfs" [pid 6053] <... close resumed>) = 0 [pid 6052] <... munmap resumed>) = 0 [pid 6051] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6054] <... symlink resumed>) = 0 [pid 6053] close(4 [pid 6054] write(1, "executing program\n", 18 [pid 6053] <... close resumed>) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6050] <... mount resumed>) = 0 executing program [pid 6054] <... write resumed>) = 18 [pid 6053] mkdir("./file1", 0777 [pid 6052] ioctl(4, LOOP_SET_FD, 3 [pid 6050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6054] memfd_create("syzkaller", 0 [pid 6053] <... mkdir resumed>) = 0 [pid 6050] <... openat resumed>) = 3 [pid 6054] <... memfd_create resumed>) = 3 [pid 6053] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6051] <... creat resumed>) = 5 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] sync( [pid 6054] <... mmap resumed>) = 0x7fd6d9800000 [pid 6050] chdir("./file1") = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6050] chdir("./file0") = 0 [pid 6050] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6050] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6052] <... ioctl resumed>) = 0 [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6053] <... mount resumed>) = 0 [pid 6050] <... creat resumed>) = 5 [pid 6053] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6052] close(3 [pid 6050] sync( [pid 6053] <... openat resumed>) = 3 [pid 6054] <... write resumed>) = 524288 [pid 6053] chdir("./file1" [pid 6052] <... close resumed>) = 0 [pid 6054] munmap(0x7fd6d9800000, 138412032 [pid 6053] <... chdir resumed>) = 0 [pid 6052] close(4 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6052] <... close resumed>) = 0 [pid 6053] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6053] chdir("./file0" [pid 6051] <... sync resumed>) = 0 [pid 6050] <... sync resumed>) = 0 [pid 6050] exit_group(0) = ? [pid 6050] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6051] exit_group(0) = ? [pid 6054] <... munmap resumed>) = 0 [pid 6052] mkdir("./file1", 0777 [pid 6051] +++ exited with 0 +++ [ 74.254955][ T6053] loop0: detected capacity change from 0 to 1024 [ 74.288659][ T6052] loop1: detected capacity change from 0 to 1024 [pid 6052] <... mkdir resumed>) = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6052] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6051, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6054] <... openat resumed>) = 4 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./43/binderfs") = 0 [pid 5832] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6053] <... chdir resumed>) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6053] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6054] close(3 [pid 5831] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6054] <... close resumed>) = 0 [pid 6053] <... openat resumed>) = 4 [pid 6052] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6053] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6054] close(4 [pid 6052] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6054] mkdir("./file1", 0777 [pid 6052] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 6054] <... mkdir resumed>) = 0 [pid 6053] <... creat resumed>) = 5 [pid 6052] chdir("./file1" [pid 5832] newfstatat(AT_FDCWD, "./43/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6053] sync( [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6054] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6052] <... chdir resumed>) = 0 [pid 5832] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./42/binderfs", [pid 6052] chdir("./file0" [pid 5832] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(4, "", [pid 5831] unlink("./42/binderfs" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6052] <... chdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] <... unlink resumed>) = 0 [pid 6052] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 6052] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 6054] <... mount resumed>) = 0 [pid 6053] <... sync resumed>) = 0 [pid 6052] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... umount2 resumed>) = 0 [ 74.338194][ T6054] loop4: detected capacity change from 0 to 1024 [pid 6053] exit_group(0) = ? [pid 6053] +++ exited with 0 +++ [pid 6054] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] rmdir("./43/file1" [pid 6054] <... openat resumed>) = 3 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6054] chdir("./file1" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] <... chdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] newfstatat(AT_FDCWD, "./42/file1", [pid 6054] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6054] chdir("./file0" [pid 5832] <... close resumed>) = 0 [pid 5831] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6052] <... creat resumed>) = 5 [pid 5832] rmdir("./43" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] <... chdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6054] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... openat resumed>) = 4 [pid 6052] sync( [pid 5832] mkdir("./44", 0777 [pid 5831] newfstatat(4, "", [pid 5829] <... openat resumed>) = 3 [pid 6054] <... openat resumed>) = 4 [pid 5832] <... mkdir resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6054] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(3, [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 5831] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5831] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] rmdir("./42/file1" [pid 5829] unlink("./42/binderfs" [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6054] <... creat resumed>) = 5 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6055 [pid 6054] sync( [pid 5831] rmdir("./42" [pid 5829] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./42/file1", ./strace-static-x86_64: Process 6055 attached [pid 5831] mkdir("./43", 0777 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6055] set_robust_list(0x555557df1660, 24 [pid 5829] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... mkdir resumed>) = 0 [pid 6055] <... set_robust_list resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] chdir("./44" [pid 5829] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6055] <... chdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] close(3 [pid 5829] getdents64(4, [pid 6055] <... prctl resumed>) = 0 [pid 6055] setpgid(0, 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6055] <... setpgid resumed>) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./42/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./42") = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6054] <... sync resumed>) = 0 [pid 6052] <... sync resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] mkdir("./43", 0777 [pid 6054] exit_group(0 [pid 6052] exit_group(0 [pid 6055] <... openat resumed>) = 3 [pid 6052] <... exit_group resumed>) = ? [pid 5829] <... mkdir resumed>) = 0 [pid 6055] write(3, "1000", 4 [pid 6054] <... exit_group resumed>) = ? [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6054] +++ exited with 0 +++ [pid 6055] <... write resumed>) = 4 [pid 6052] +++ exited with 0 +++ [pid 5829] <... openat resumed>) = 3 [pid 6055] close(3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6054, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6052, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6056 attached [pid 6055] <... close resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... ioctl resumed>) = 0 [pid 6056] set_robust_list(0x555557df1660, 24 [pid 6055] symlink("/dev/binderfs", "./binderfs" [pid 6056] <... set_robust_list resumed>) = 0 [pid 6055] <... symlink resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6056 [pid 5829] close(3 [pid 6056] chdir("./43"executing program [pid 6055] write(1, "executing program\n", 18) = 18 [pid 6056] <... chdir resumed>) = 0 [pid 6055] memfd_create("syzkaller", 0 [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6055] <... memfd_create resumed>) = 3 [pid 6056] <... prctl resumed>) = 0 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6056] setpgid(0, 0 [pid 6055] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... close resumed>) = 0 [pid 6056] <... setpgid resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6056] write(3, "1000", 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6056] <... write resumed>) = 4 [pid 5833] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 6056] close(3) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] getdents64(3, executing program [pid 6056] write(1, "executing program\n", 18./strace-static-x86_64: Process 6057 attached ) = 18 [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6056] memfd_create("syzkaller", 0 [pid 6057] set_robust_list(0x555557df1660, 24 [pid 5833] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6057] <... set_robust_list resumed>) = 0 [pid 6056] <... memfd_create resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6057 [pid 5833] newfstatat(3, "", [pid 5830] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6057] chdir("./43" [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] unlink("./42/binderfs" [pid 6057] <... chdir resumed>) = 0 [pid 6056] <... mmap resumed>) = 0x7fd6d9800000 [pid 6055] <... write resumed>) = 524288 [pid 5833] getdents64(3, [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6057] <... prctl resumed>) = 0 [pid 6057] setpgid(0, 0) = 0 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] <... openat resumed>) = 3 [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3 [pid 5833] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5830] <... umount2 resumed>) = 0 [pid 6057] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs" [pid 5833] unlink("./42/binderfs" [pid 6057] <... symlink resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 6057] write(1, "executing program\n", 18 [pid 5833] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6057] <... write resumed>) = 18 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6057] memfd_create("syzkaller", 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6057] <... memfd_create resumed>) = 3 [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] newfstatat(AT_FDCWD, "./42/file1", [pid 5833] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./42/file1", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] <... mmap resumed>) = 0x7fd6d9800000 [pid 6055] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6056] <... write resumed>) = 524288 [pid 6055] <... openat resumed>) = 4 [pid 5833] umount2("./42/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(4, "", [pid 5833] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5830] getdents64(4, [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] newfstatat(4, "", [pid 5830] getdents64(4, [pid 6056] munmap(0x7fd6d9800000, 138412032 [pid 6055] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6055] close(3 [pid 5830] close(4 [pid 5833] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 6055] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] rmdir("./42/file1" [pid 6056] <... munmap resumed>) = 0 [pid 6055] close(4 [pid 5833] getdents64(4, [pid 6055] <... close resumed>) = 0 [pid 6057] <... write resumed>) = 524288 [pid 6056] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6055] mkdir("./file1", 0777 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6057] munmap(0x7fd6d9800000, 138412032 [pid 6056] <... openat resumed>) = 4 [pid 6055] <... mkdir resumed>) = 0 [pid 5833] close(4 [pid 6056] ioctl(4, LOOP_SET_FD, 3 [pid 6055] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... close resumed>) = 0 [pid 6057] <... munmap resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] rmdir("./42/file1" [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6056] <... ioctl resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6057] <... openat resumed>) = 4 [pid 6056] close(3 [pid 5833] getdents64(3, [pid 5830] close(3 [pid 6057] ioctl(4, LOOP_SET_FD, 3 [pid 6056] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./42") = 0 [pid 5833] mkdir("./43", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6057] <... ioctl resumed>) = 0 [pid 6056] close(4 [pid 6055] <... mount resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] rmdir("./42" [pid 6056] <... close resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] close(3 [pid 6057] close(3 [pid 6056] mkdir("./file1", 0777 [pid 6055] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6057] <... close resumed>) = 0 [pid 6057] close(4 [pid 6055] chdir("./file1" [pid 5830] mkdir("./43", 0777 [pid 6057] <... close resumed>) = 0 [pid 6056] <... mkdir resumed>) = 0 [pid 6055] <... chdir resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6057] mkdir("./file1", 0777 [pid 5830] <... mkdir resumed>) = 0 [pid 6056] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6057] <... mkdir resumed>) = 0 [pid 6055] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6055] chdir("./file0" [pid 6057] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6055] <... chdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6055] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... ioctl resumed>) = 0 [pid 6055] <... openat resumed>) = 4 [pid 5830] close(3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6058 attached [pid 6055] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] set_robust_list(0x555557df1660, 24 [pid 5830] <... close resumed>) = 0 [pid 6058] <... set_robust_list resumed>) = 0 [pid 6058] chdir("./43") = 0 [pid 6055] <... creat resumed>) = 5 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6058 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6057] <... mount resumed>) = 0 [pid 6058] <... prctl resumed>) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6057] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6055] sync( [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6056] <... mount resumed>) = 0 [pid 6057] <... openat resumed>) = 3 [pid 6058] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6059 attached [pid 6057] chdir("./file1" [ 74.539502][ T6055] loop3: detected capacity change from 0 to 1024 [ 74.561877][ T6056] loop2: detected capacity change from 0 to 1024 [ 74.573156][ T6057] loop0: detected capacity change from 0 to 1024 [pid 6056] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6058] write(3, "1000", 4 [pid 6057] <... chdir resumed>) = 0 [pid 6056] <... openat resumed>) = 3 [pid 6059] set_robust_list(0x555557df1660, 24 [pid 6058] <... write resumed>) = 4 [pid 6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6056] chdir("./file1" [pid 6059] <... set_robust_list resumed>) = 0 [pid 6058] close(3executing program executing program [pid 6057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6056] <... chdir resumed>) = 0 [pid 6055] <... sync resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6059 [pid 6057] chdir("./file0" [pid 6056] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6059] chdir("./43" [pid 6056] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6059] <... chdir resumed>) = 0 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6056] chdir("./file0" [pid 6058] <... close resumed>) = 0 [pid 6059] <... prctl resumed>) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs" [pid 6059] setpgid(0, 0 [pid 6058] <... symlink resumed>) = 0 [pid 6057] <... chdir resumed>) = 0 [pid 6056] <... chdir resumed>) = 0 [pid 6059] <... setpgid resumed>) = 0 [pid 6057] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6056] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6055] exit_group(0 [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6059] write(3, "1000", 4 [pid 6056] <... openat resumed>) = 4 [pid 6055] <... exit_group resumed>) = ? [pid 6059] <... write resumed>) = 4 [pid 6059] close(3) = 0 [pid 6059] symlink("/dev/binderfs", "./binderfs" [pid 6058] write(1, "executing program\n", 18 [pid 6059] <... symlink resumed>) = 0 [pid 6057] <... openat resumed>) = 4 [pid 6058] <... write resumed>) = 18 [pid 6058] memfd_create("syzkaller", 0 [pid 6059] write(1, "executing program\n", 18 [pid 6058] <... memfd_create resumed>) = 3 [pid 6059] <... write resumed>) = 18 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6055] +++ exited with 0 +++ [pid 6057] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6056] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6059] memfd_create("syzkaller", 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6059] <... memfd_create resumed>) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6057] <... creat resumed>) = 5 [pid 6056] <... creat resumed>) = 5 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6057] sync( [pid 6056] sync( [pid 5832] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", [pid 6058] <... write resumed>) = 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6058] munmap(0x7fd6d9800000, 138412032 [pid 6059] <... write resumed>) = 524288 [pid 6057] <... sync resumed>) = 0 [pid 6056] <... sync resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6057] exit_group(0 [pid 6056] exit_group(0 [pid 6059] munmap(0x7fd6d9800000, 138412032 [pid 6058] <... munmap resumed>) = 0 [pid 6059] <... munmap resumed>) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6059] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6058] <... openat resumed>) = 4 [pid 6059] <... openat resumed>) = 4 [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 6059] ioctl(4, LOOP_SET_FD, 3 [pid 6057] <... exit_group resumed>) = ? [pid 6056] <... exit_group resumed>) = ? [pid 5832] unlink("./44/binderfs" [pid 6056] +++ exited with 0 +++ [pid 5832] <... unlink resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6057] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./43/binderfs") = 0 [pid 5831] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6058] <... ioctl resumed>) = 0 [pid 6059] <... ioctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./44/file1", [pid 5829] <... openat resumed>) = 3 [pid 5831] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 6058] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6059] close(3 [pid 6058] <... close resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./43/file1", [pid 5829] getdents64(3, [pid 6059] <... close resumed>) = 0 [pid 6058] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6059] close(4 [pid 6058] <... close resumed>) = 0 [pid 5832] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6059] <... close resumed>) = 0 [pid 6058] mkdir("./file1", 0777 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] mkdir("./file1", 0777 [pid 6058] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(AT_FDCWD, "./43/binderfs", [pid 6059] <... mkdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./43/binderfs") = 0 [pid 5829] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 6059] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6058] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(4, [pid 5831] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] getdents64(4, [pid 6058] <... mount resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] close(4 [pid 5831] getdents64(4, [pid 6058] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6058] chdir("./file1" [pid 5832] rmdir("./44/file1" [pid 5831] close(4 [pid 5829] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6059] <... mount resumed>) = 0 [pid 6058] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6058] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./43/file1" [pid 5829] newfstatat(AT_FDCWD, "./43/file1", [pid 6059] <... openat resumed>) = 3 [pid 6058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 6059] chdir("./file1" [pid 6058] chdir("./file0" [pid 5831] getdents64(3, [ 74.681658][ T6059] loop1: detected capacity change from 0 to 1024 [ 74.689023][ T6058] loop4: detected capacity change from 0 to 1024 [pid 5829] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 6059] <... chdir resumed>) = 0 [pid 5832] rmdir("./44" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5831] close(3 [pid 5829] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6059] chdir("./file0" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5832] mkdir("./45", 0777 [pid 5831] rmdir("./43" [pid 5829] newfstatat(4, "", [pid 6059] <... chdir resumed>) = 0 [pid 6058] <... chdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6059] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6058] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... rmdir resumed>) = 0 [pid 6059] <... openat resumed>) = 4 [pid 6058] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 3 [pid 5831] mkdir("./44", 0777 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] getdents64(4, [pid 5832] close(3) = 0 [pid 6059] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6059] <... creat resumed>) = 5 [pid 6058] <... creat resumed>) = 5 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6060 attached [pid 6059] sync( [pid 5831] <... openat resumed>) = 3 [pid 6060] set_robust_list(0x555557df1660, 24 [pid 6058] sync( [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] getdents64(4, [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6060 [pid 5831] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6060] <... set_robust_list resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] close(4) = 0 [pid 6060] chdir("./45" [pid 5829] rmdir("./43/file1" [pid 6060] <... chdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] getdents64(3, [pid 6060] <... prctl resumed>) = 0 [pid 6060] setpgid(0, 0) = 0 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6061 attached [pid 5829] close(3) = 0 [pid 5829] rmdir("./43") = 0 [pid 6061] set_robust_list(0x555557df1660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6061 [pid 5829] mkdir("./44", 0777 [pid 6060] <... openat resumed>) = 3 [pid 5829] <... mkdir resumed>) = 0 [pid 6061] <... set_robust_list resumed>) = 0 [pid 6060] write(3, "1000", 4 [pid 6061] chdir("./44" [pid 6060] <... write resumed>) = 4 [pid 6060] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6061] <... chdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... ioctl resumed>) = 0 [pid 6061] <... prctl resumed>) = 0 [pid 6060] symlink("/dev/binderfs", "./binderfs" [pid 5829] close(3 [pid 6061] setpgid(0, 0) = 0 [pid 6060] <... symlink resumed>) = 0 [pid 6059] <... sync resumed>) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6060] write(1, "executing program\n", 18 [pid 6059] exit_group(0executing program [pid 6060] <... write resumed>) = 18 [pid 6059] <... exit_group resumed>) = ? [pid 5829] <... close resumed>) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] write(1, "executing program\n", 18executing program [pid 6060] memfd_create("syzkaller", 0 [pid 6059] +++ exited with 0 +++ [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6061] <... write resumed>) = 18 [pid 6060] <... memfd_create resumed>) = 3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- ./strace-static-x86_64: Process 6062 attached [pid 6061] memfd_create("syzkaller", 0 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6058] <... sync resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6060] <... mmap resumed>) = 0x7fd6d9800000 [pid 6062] set_robust_list(0x555557df1660, 24) = 0 [pid 6061] <... memfd_create resumed>) = 3 [pid 6058] exit_group(0 [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6058] <... exit_group resumed>) = ? [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6062 [pid 6061] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6062] chdir("./44" [pid 6058] +++ exited with 0 +++ [pid 5830] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6062] <... chdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6062] setpgid(0, 0 [pid 6060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... openat resumed>) = 3 [pid 6062] <... setpgid resumed>) = 0 [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6060] <... write resumed>) = 524288 [pid 5830] newfstatat(3, "", [pid 6062] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6062] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6062] <... write resumed>) = 4 [pid 6062] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6062] <... close resumed>) = 0 [pid 6061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] unlink("./43/binderfs" [pid 6062] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6062] <... symlink resumed>) = 0 [pid 5833] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program ) = -1 EINVAL (Invalid argument) [pid 6062] write(1, "executing program\n", 18 [pid 5833] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6062] <... write resumed>) = 18 [pid 5833] <... openat resumed>) = 3 [pid 6062] memfd_create("syzkaller", 0 [pid 5833] newfstatat(3, "", [pid 6062] <... memfd_create resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] getdents64(3, [pid 6062] <... mmap resumed>) = 0x7fd6d9800000 [pid 6061] <... write resumed>) = 524288 [pid 6060] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... umount2 resumed>) = 0 [pid 5833] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./43/binderfs") = 0 [pid 6060] <... munmap resumed>) = 0 [pid 5830] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./43/file1", [pid 6060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 6060] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6060] ioctl(4, LOOP_SET_FD, 3 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6061] munmap(0x7fd6d9800000, 138412032 [pid 5830] close(4 [pid 6061] <... munmap resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./43/file1" [pid 6061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... rmdir resumed>) = 0 [pid 6061] <... openat resumed>) = 4 [pid 6061] ioctl(4, LOOP_SET_FD, 3 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6060] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6060] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./43/file1", [pid 5830] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... close resumed>) = 0 [pid 5833] umount2("./43/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] rmdir("./43" [pid 6060] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... rmdir resumed>) = 0 [pid 6060] close(4 [pid 5833] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] mkdir("./44", 0777 [pid 6060] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5830] <... mkdir resumed>) = 0 [pid 6060] mkdir("./file1", 0777 [pid 5833] newfstatat(4, "", [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6060] <... mkdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6060] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] getdents64(4, [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... ioctl resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] close(3 [pid 6062] <... write resumed>) = 524288 [pid 6061] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 6062] munmap(0x7fd6d9800000, 138412032 [pid 5833] close(4) = 0 [pid 5833] rmdir("./43/file1" [pid 6062] <... munmap resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] rmdir("./43") = 0 [pid 5833] mkdir("./44", 0777./strace-static-x86_64: Process 6063 attached [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6061] close(3 [pid 6060] <... mount resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6063 [pid 6063] set_robust_list(0x555557df1660, 24 [pid 6062] <... openat resumed>) = 4 [pid 6061] <... close resumed>) = 0 [ 74.865281][ T6060] loop3: detected capacity change from 0 to 1024 [ 74.880037][ T6061] loop2: detected capacity change from 0 to 1024 [pid 6060] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6063] <... set_robust_list resumed>) = 0 [pid 6062] ioctl(4, LOOP_SET_FD, 3 [pid 6061] close(4 [pid 6060] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6061] <... close resumed>) = 0 [pid 6060] chdir("./file1" [pid 5833] <... openat resumed>) = 3 [pid 6061] mkdir("./file1", 0777 [pid 6060] <... chdir resumed>) = 0 [pid 6061] <... mkdir resumed>) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... ioctl resumed>) = 0 [pid 6060] chdir("./file0" [pid 5833] close(3 [pid 6061] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... close resumed>) = 0 [pid 6060] <... chdir resumed>) = 0 [pid 6060] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6063] chdir("./44") = 0 [pid 6060] <... openat resumed>) = 4 [pid 6060] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6062] <... ioctl resumed>) = 0 [pid 6061] <... mount resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6063] <... prctl resumed>) = 0 [pid 6061] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6063] setpgid(0, 0 [pid 6062] close(3 [pid 6061] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6064 attached [pid 6063] <... setpgid resumed>) = 0 [pid 6062] <... close resumed>) = 0 [pid 6061] chdir("./file1" [pid 6064] set_robust_list(0x555557df1660, 24 [pid 6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6062] close(4 [pid 6061] <... chdir resumed>) = 0 [pid 6060] <... creat resumed>) = 5 [pid 6062] <... close resumed>) = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6062] mkdir("./file1", 0777 [pid 6061] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6062] <... mkdir resumed>) = 0 [pid 6061] chdir("./file0" [pid 6060] sync( [pid 6063] <... openat resumed>) = 3 [pid 6062] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6064 [pid 6064] <... set_robust_list resumed>) = 0 [pid 6063] write(3, "1000", 4 [pid 6061] <... chdir resumed>) = 0 [pid 6061] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6063] <... write resumed>) = 4 [pid 6063] close(3) = 0 [pid 6064] chdir("./44" [pid 6063] symlink("/dev/binderfs", "./binderfs" [pid 6061] <... openat resumed>) = 4 executing program [pid 6063] <... symlink resumed>) = 0 [pid 6063] write(1, "executing program\n", 18 [pid 6061] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6064] <... chdir resumed>) = 0 [pid 6063] <... write resumed>) = 18 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6063] memfd_create("syzkaller", 0 [pid 6064] <... prctl resumed>) = 0 [pid 6063] <... memfd_create resumed>) = 3 [pid 6064] setpgid(0, 0 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6064] <... setpgid resumed>) = 0 [pid 6063] <... mmap resumed>) = 0x7fd6d9800000 [pid 6062] <... mount resumed>) = 0 [pid 6061] <... creat resumed>) = 5 [pid 6060] <... sync resumed>) = 0 [ 74.932516][ T6062] loop0: detected capacity change from 0 to 1024 [pid 6062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6060] exit_group(0 [pid 6062] <... openat resumed>) = 3 [pid 6061] sync( [pid 6062] chdir("./file1" [pid 6060] <... exit_group resumed>) = ? [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6062] <... chdir resumed>) = 0 [pid 6060] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6060, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6062] chdir("./file0" [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6064] <... openat resumed>) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3 [pid 6062] <... chdir resumed>) = 0 [pid 6064] <... close resumed>) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6062] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6061] <... sync resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6064] write(1, "executing program\n", 18 [pid 6062] <... openat resumed>) = 4 [pid 5832] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program ) = 3 [pid 6064] <... write resumed>) = 18 [pid 6061] exit_group(0 [pid 5832] newfstatat(3, "", [pid 6064] memfd_create("syzkaller", 0 [pid 6063] <... write resumed>) = 524288 [pid 6061] <... exit_group resumed>) = ? [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6064] <... memfd_create resumed>) = 3 [pid 5832] getdents64(3, [pid 6062] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6061] +++ exited with 0 +++ [pid 5832] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] <... mmap resumed>) = 0x7fd6d9800000 [pid 6063] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6063] <... munmap resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6063] <... openat resumed>) = 4 [pid 5832] unlink("./45/binderfs") = 0 [pid 6063] ioctl(4, LOOP_SET_FD, 3 [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6062] <... creat resumed>) = 5 [pid 5832] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... restart_syscall resumed>) = 0 [pid 6062] sync( [pid 6063] <... ioctl resumed>) = 0 [pid 6063] close(3) = 0 [pid 6063] close(4) = 0 [pid 6064] <... write resumed>) = 524288 [pid 6063] mkdir("./file1", 0777 [pid 6062] <... sync resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6064] munmap(0x7fd6d9800000, 138412032 [pid 6063] <... mkdir resumed>) = 0 [pid 6062] exit_group(0 [pid 5832] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] <... munmap resumed>) = 0 [pid 6062] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6064] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6062] +++ exited with 0 +++ [pid 5832] newfstatat(AT_FDCWD, "./45/file1", [pid 6064] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6062, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./44/binderfs") = 0 [pid 5831] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] <... ioctl resumed>) = 0 [pid 6063] <... mount resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6064] close(3) = 0 [pid 6063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 6064] close(4 [pid 6063] <... openat resumed>) = 3 [pid 5832] newfstatat(4, "", [pid 6064] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6064] mkdir("./file1", 0777 [pid 6063] chdir("./file1" [pid 5832] getdents64(4, [pid 6063] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] getdents64(4, [pid 6064] <... mkdir resumed>) = 0 [pid 6063] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... umount2 resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6063] chdir("./file0" [pid 5832] close(4) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6063] <... chdir resumed>) = 0 [pid 5832] rmdir("./45/file1" [pid 5829] <... openat resumed>) = 3 [pid 6063] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, [pid 5832] close(3 [pid 5831] newfstatat(AT_FDCWD, "./44/file1", [pid 5832] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] rmdir("./45" [pid 5831] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6063] <... openat resumed>) = 4 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6063] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... openat resumed>) = 4 [pid 5829] newfstatat(AT_FDCWD, "./44/binderfs", [pid 6064] <... mount resumed>) = 0 [pid 5832] mkdir("./46", 0777 [pid 5831] newfstatat(4, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6064] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] unlink("./44/binderfs" [pid 6064] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6064] chdir("./file1" [pid 6063] <... creat resumed>) = 5 [pid 5832] <... openat resumed>) = 3 [pid 5831] getdents64(4, [pid 5829] <... unlink resumed>) = 0 [pid 6064] <... chdir resumed>) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6063] sync( [pid 5832] <... ioctl resumed>) = 0 [pid 5831] getdents64(4, [pid 5832] close(3 [pid 6064] chdir("./file0" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./44/file1") = 0 [ 75.032093][ T6063] loop1: detected capacity change from 0 to 1024 [ 75.057285][ T6064] loop4: detected capacity change from 0 to 1024 [pid 5831] getdents64(3, [pid 6064] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6064] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6065 attached [pid 6064] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./44/file1", [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6065 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5829] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6065] set_robust_list(0x555557df1660, 24 [pid 5831] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 6065] <... set_robust_list resumed>) = 0 [pid 6064] <... creat resumed>) = 5 [pid 5831] rmdir("./44" [pid 5829] newfstatat(4, "", [pid 6065] chdir("./46" [pid 6064] sync( [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6065] <... chdir resumed>) = 0 [pid 5829] getdents64(4, [pid 6065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6065] setpgid(0, 0 [pid 6063] <... sync resumed>) = 0 [pid 5831] mkdir("./45", 0777 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6065] <... setpgid resumed>) = 0 [pid 6063] exit_group(0 [pid 6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6063] <... exit_group resumed>) = ? [pid 6065] <... openat resumed>) = 3 [pid 5829] getdents64(4, [pid 6065] write(3, "1000", 4 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6065] <... write resumed>) = 4 [pid 6065] close(3 [pid 6064] <... sync resumed>) = 0 [pid 6063] +++ exited with 0 +++ [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] close(4 [pid 6065] <... close resumed>) = 0 [pid 6065] symlink("/dev/binderfs", "./binderfs" [pid 6064] exit_group(0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6063, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... openat resumed>) = 3 [pid 5829] <... close resumed>) = 0 [pid 6065] <... symlink resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] rmdir("./44/file1" [pid 6064] <... exit_group resumed>) = ? [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] close(3 [pid 5830] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] +++ exited with 0 +++ executing program [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6064, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 6065] write(1, "executing program\n", 18) = 18 [pid 5830] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6065] memfd_create("syzkaller", 0) = 3 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... openat resumed>) = 3 [pid 6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] newfstatat(3, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] rmdir("./44" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6066 attached [pid 5833] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5829] mkdir("./45", 0777 [pid 5833] newfstatat(3, "", [pid 5830] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6066 [pid 6066] set_robust_list(0x555557df1660, 24 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... mkdir resumed>) = 0 [pid 6066] <... set_robust_list resumed>) = 0 [pid 5833] getdents64(3, [pid 5830] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6066] chdir("./45" [pid 6065] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 executing program [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6065] munmap(0x7fd6d9800000, 138412032 [pid 5833] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./44/binderfs" [pid 5829] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6066] <... chdir resumed>) = 0 [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... unlink resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6066] <... prctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] unlink("./44/binderfs" [pid 5829] close(3 [pid 6066] setpgid(0, 0 [pid 5833] <... unlink resumed>) = 0 [pid 6066] <... setpgid resumed>) = 0 [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6066] write(3, "1000", 4 [pid 5833] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6066] <... write resumed>) = 4 [pid 6066] close(3) = 0 [pid 6066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6066] write(1, "executing program\n", 18) = 18 [pid 6066] memfd_create("syzkaller", 0 [pid 6065] <... munmap resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6066] <... memfd_create resumed>) = 3 [pid 6065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6066] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6067 attached [pid 6065] <... openat resumed>) = 4 [pid 6067] set_robust_list(0x555557df1660, 24 [pid 6065] ioctl(4, LOOP_SET_FD, 3 [pid 6067] <... set_robust_list resumed>) = 0 [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] newfstatat(AT_FDCWD, "./44/file1", [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6067 [pid 6067] chdir("./45" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6067] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... openat resumed>) = 4 [pid 5830] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [pid 6067] <... prctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] setpgid(0, 0 [pid 5830] newfstatat(AT_FDCWD, "./44/file1", [pid 6067] <... setpgid resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] umount2("./44/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6067] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6067] write(3, "1000", 4 [pid 5833] getdents64(4, [pid 5830] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6067] <... write resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 6067] close(3 [pid 5830] newfstatat(4, "", [pid 6067] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs" [pid 5830] getdents64(4, [pid 6067] <... symlink resumed>) = 0 [pid 6066] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 executing program [pid 5833] getdents64(4, [pid 5830] getdents64(4, [pid 6067] write(1, "executing program\n", 18 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6067] <... write resumed>) = 18 [pid 6066] munmap(0x7fd6d9800000, 138412032 [pid 6065] <... ioctl resumed>) = 0 [pid 5833] close(4 [pid 5830] close(4 [pid 6067] memfd_create("syzkaller", 0 [pid 6066] <... munmap resumed>) = 0 [pid 6065] close(3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6067] <... memfd_create resumed>) = 3 [pid 5833] rmdir("./44/file1" [pid 5830] rmdir("./44/file1" [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6065] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./44" [pid 6066] <... openat resumed>) = 4 [pid 6065] close(4 [pid 5833] getdents64(3, [pid 5830] <... rmdir resumed>) = 0 [pid 6066] ioctl(4, LOOP_SET_FD, 3 [pid 6065] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] mkdir("./45", 0777 [pid 6067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] close(3 [pid 5830] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 6065] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 6067] <... write resumed>) = 524288 [pid 6066] <... ioctl resumed>) = 0 [pid 6065] <... mkdir resumed>) = 0 [pid 5833] rmdir("./44" [pid 5830] <... close resumed>) = 0 [pid 6065] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... rmdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] mkdir("./45", 0777 [pid 6067] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6068 attached [pid 6067] <... munmap resumed>) = 0 [pid 6066] close(3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6068] set_robust_list(0x555557df1660, 24 [pid 6066] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6068] <... set_robust_list resumed>) = 0 [pid 6066] close(4 [pid 5833] <... ioctl resumed>) = 0 [pid 6066] <... close resumed>) = 0 [pid 6068] chdir("./45" [pid 6066] mkdir("./file1", 0777 [pid 5833] close(3 [pid 6068] <... chdir resumed>) = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6066] <... mkdir resumed>) = 0 [pid 6065] <... mount resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6068 [pid 6067] <... openat resumed>) = 4 [ 75.206932][ T6065] loop3: detected capacity change from 0 to 1024 [ 75.235692][ T6066] loop2: detected capacity change from 0 to 1024 [pid 6067] ioctl(4, LOOP_SET_FD, 3 [pid 6066] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6065] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 6068] <... prctl resumed>) = 0 [pid 6065] <... openat resumed>) = 3 [pid 6067] <... ioctl resumed>) = 0 [pid 6068] setpgid(0, 0 [pid 6066] <... mount resumed>) = 0 [pid 6065] chdir("./file1" [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6068] <... setpgid resumed>) = 0 [pid 6065] <... chdir resumed>) = 0 [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6066] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6068] <... openat resumed>) = 3 [pid 6066] <... openat resumed>) = 3 [pid 6065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6068] write(3, "1000", 4 [pid 6065] chdir("./file0" [pid 6068] <... write resumed>) = 4 [pid 6068] close(3 [pid 6067] close(3 [pid 6066] chdir("./file1"./strace-static-x86_64: Process 6069 attached [pid 6068] <... close resumed>) = 0 [pid 6067] <... close resumed>) = 0 [pid 6066] <... chdir resumed>) = 0 [pid 6068] symlink("/dev/binderfs", "./binderfs" [pid 6067] close(4 [pid 6066] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6069] set_robust_list(0x555557df1660, 24 [pid 6068] <... symlink resumed>) = 0 [pid 6067] <... close resumed>) = 0 [pid 6066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6065] <... chdir resumed>) = 0 [pid 6069] <... set_robust_list resumed>) = 0 executing program [pid 6068] write(1, "executing program\n", 18 [pid 6067] mkdir("./file1", 0777 [pid 6066] chdir("./file0" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6069 [pid 6069] chdir("./45" [pid 6068] <... write resumed>) = 18 [pid 6067] <... mkdir resumed>) = 0 [pid 6065] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6069] <... chdir resumed>) = 0 [pid 6068] memfd_create("syzkaller", 0 [pid 6067] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6066] <... chdir resumed>) = 0 [pid 6065] <... openat resumed>) = 4 [pid 6069] <... prctl resumed>) = 0 [pid 6068] <... memfd_create resumed>) = 3 [pid 6065] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6069] setpgid(0, 0 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6069] <... setpgid resumed>) = 0 [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6068] <... mmap resumed>) = 0x7fd6d9800000 [pid 6066] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [ 75.265346][ T6067] loop0: detected capacity change from 0 to 1024 [pid 6069] <... openat resumed>) = 3 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6066] <... openat resumed>) = 4 [pid 6065] <... creat resumed>) = 5 [pid 6069] write(3, "1000", 4) = 4 [pid 6067] <... mount resumed>) = 0 [pid 6066] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6069] close(3 [pid 6067] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6065] sync( [pid 6069] <... close resumed>) = 0 executing program [pid 6069] symlink("/dev/binderfs", "./binderfs" [pid 6067] <... openat resumed>) = 3 [pid 6067] chdir("./file1" [pid 6069] <... symlink resumed>) = 0 [pid 6067] <... chdir resumed>) = 0 [pid 6069] write(1, "executing program\n", 18 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6069] <... write resumed>) = 18 [pid 6068] <... write resumed>) = 524288 [pid 6067] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6069] memfd_create("syzkaller", 0 [pid 6068] munmap(0x7fd6d9800000, 138412032 [pid 6067] chdir("./file0" [pid 6066] <... creat resumed>) = 5 [pid 6068] <... munmap resumed>) = 0 [pid 6066] sync( [pid 6069] <... memfd_create resumed>) = 3 [pid 6068] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6068] <... openat resumed>) = 4 [pid 6067] <... chdir resumed>) = 0 [pid 6067] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6068] ioctl(4, LOOP_SET_FD, 3 [pid 6067] <... openat resumed>) = 4 [pid 6067] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6067] sync( [pid 6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6068] <... ioctl resumed>) = 0 [pid 6068] close(3 [pid 6069] <... write resumed>) = 524288 [pid 6067] <... sync resumed>) = 0 [pid 6066] <... sync resumed>) = 0 [pid 6065] <... sync resumed>) = 0 [pid 6068] <... close resumed>) = 0 [pid 6069] munmap(0x7fd6d9800000, 138412032 [pid 6066] exit_group(0 [pid 6068] close(4 [pid 6067] exit_group(0 [pid 6069] <... munmap resumed>) = 0 [pid 6068] <... close resumed>) = 0 [pid 6066] <... exit_group resumed>) = ? [pid 6065] exit_group(0 [pid 6068] mkdir("./file1", 0777 [pid 6067] <... exit_group resumed>) = ? [pid 6066] +++ exited with 0 +++ [pid 6065] <... exit_group resumed>) = ? [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6066, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6067] +++ exited with 0 +++ [pid 6065] +++ exited with 0 +++ [pid 6069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6065, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6069] <... openat resumed>) = 4 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 75.357053][ T6068] loop1: detected capacity change from 0 to 1024 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6069] ioctl(4, LOOP_SET_FD, 3 [pid 6068] <... mkdir resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6068] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5829] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] getdents64(3, [pid 5832] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5829] <... openat resumed>) = 3 [pid 5832] unlink("./46/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(3, "", [pid 5832] <... unlink resumed>) = 0 [pid 5831] unlink("./45/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6069] <... ioctl resumed>) = 0 [pid 6068] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6069] close(3 [pid 6068] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6069] <... close resumed>) = 0 [pid 6068] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./45/binderfs", [pid 6069] close(4 [pid 6068] chdir("./file1" [pid 5832] newfstatat(AT_FDCWD, "./46/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6069] <... close resumed>) = 0 [pid 6068] <... chdir resumed>) = 0 [pid 5829] unlink("./45/binderfs" [pid 6069] mkdir("./file1", 0777 [pid 6068] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... unlink resumed>) = 0 [pid 6069] <... mkdir resumed>) = 0 [pid 6068] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6068] chdir("./file0") = 0 [pid 5832] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 6069] <... mount resumed>) = 0 [pid 6068] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6068] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./45/file1", [pid 5829] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] <... openat resumed>) = 3 [pid 6068] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] chdir("./file1" [pid 5832] newfstatat(4, "", [pid 5831] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./45/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] getdents64(4, [pid 5831] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(4, "", [pid 6069] chdir("./file0" [pid 6068] <... creat resumed>) = 5 [pid 5832] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6069] <... chdir resumed>) = 0 [pid 6068] sync( [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5831] close(4 [pid 6069] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] rmdir("./46/file1" [pid 5831] <... close resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 5831] rmdir("./45/file1") = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 6069] <... openat resumed>) = 4 [ 75.400073][ T6069] loop4: detected capacity change from 0 to 1024 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5831] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6069] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] getdents64(4, [pid 5832] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./45" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./45/file1" [pid 5831] <... rmdir resumed>) = 0 [pid 5831] mkdir("./46", 0777) = 0 [pid 6069] <... creat resumed>) = 5 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6069] sync( [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./46" [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] close(3 [pid 5829] <... close resumed>) = 0 [pid 6068] <... sync resumed>) = 0 [pid 6069] <... sync resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] rmdir("./45" [pid 6069] exit_group(0 [pid 6068] exit_group(0 [pid 6069] <... exit_group resumed>) = ? [pid 6069] +++ exited with 0 +++ [pid 6068] <... exit_group resumed>) = ? [pid 6068] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6068, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] mkdir("./47", 0777 [pid 5831] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] mkdir("./46", 0777 [pid 5833] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, ./strace-static-x86_64: Process 6070 attached [pid 5833] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6070] set_robust_list(0x555557df1660, 24 [pid 5830] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6070] <... set_robust_list resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] chdir("./46" [pid 5830] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6070] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6070 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] getdents64(3, [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] unlink("./45/binderfs" [pid 6070] <... prctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6070] setpgid(0, 0 [pid 5833] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 5829] close(3 [pid 6070] <... setpgid resumed>) = 0 [pid 5830] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 6070] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5833] unlink("./45/binderfs" [pid 5830] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 6070] write(3, "1000", 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] <... write resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6071 attached [pid 6070] close(3 [pid 5833] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 6070] <... close resumed>) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 6070] write(1, "executing program\n", 18 [pid 5830] getdents64(4, [pid 6070] <... write resumed>) = 18 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6070] memfd_create("syzkaller", 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./45/file1" [pid 6070] <... memfd_create resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] getdents64(3, [pid 6070] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6071] set_robust_list(0x555557df1660, 24 [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] close(3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6071] <... set_robust_list resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6071 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./45") = 0 [pid 5830] mkdir("./46", 0777 [pid 6071] chdir("./47" [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6072 [pid 6071] <... chdir resumed>) = 0 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6072 attached ) = 0 [pid 6070] <... write resumed>) = 524288 [pid 5833] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6071] setpgid(0, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6071] <... setpgid resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./45/file1", [pid 6072] set_robust_list(0x555557df1660, 24 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6072] <... set_robust_list resumed>) = 0 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./45/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6072] chdir("./46" [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 6072] <... chdir resumed>) = 0 [pid 6071] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] munmap(0x7fd6d9800000, 138412032 [pid 5833] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6072] setpgid(0, 0 [pid 6071] write(3, "1000", 4 [pid 6070] <... munmap resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 6072] <... setpgid resumed>) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6071] <... write resumed>) = 4 [pid 6070] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 6071] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6071] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 6070] ioctl(4, LOOP_SET_FD, 3 [pid 6071] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6072] <... openat resumed>) = 3 [pid 6071] <... symlink resumed>) = 0 [pid 5833] getdents64(4, executing program [pid 6072] write(3, "1000", 4 [pid 6071] write(1, "executing program\n", 18 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6071] <... write resumed>) = 18 [pid 6072] <... write resumed>) = 4 [pid 6072] close(3) = 0 [pid 6071] memfd_create("syzkaller", 0 [pid 6072] symlink("/dev/binderfs", "./binderfs"executing program ./strace-static-x86_64: Process 6073 attached ) = 0 [pid 6071] <... memfd_create resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 6072] write(1, "executing program\n", 18) = 18 [pid 6072] memfd_create("syzkaller", 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6073 [pid 6073] set_robust_list(0x555557df1660, 24 [pid 6072] <... memfd_create resumed>) = 3 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] rmdir("./45/file1" [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6071] <... mmap resumed>) = 0x7fd6d9800000 [pid 6073] <... set_robust_list resumed>) = 0 [pid 6072] <... mmap resumed>) = 0x7fd6d9800000 [pid 6073] chdir("./46" [pid 5833] <... rmdir resumed>) = 0 [pid 6073] <... chdir resumed>) = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 6073] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./45" [pid 6073] write(3, "1000", 4executing program ) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] write(1, "executing program\n", 18) = 18 [pid 6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6073] memfd_create("syzkaller", 0) = 3 [pid 5833] mkdir("./46", 0777) = 0 [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6070] <... ioctl resumed>) = 0 [pid 6073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6070] close(3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6070] <... close resumed>) = 0 [pid 6070] close(4) = 0 [pid 6070] mkdir("./file1", 0777) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6072] <... write resumed>) = 524288 [pid 5833] <... ioctl resumed>) = 0 [pid 6070] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6072] munmap(0x7fd6d9800000, 138412032 [pid 5833] close(3 [pid 6072] <... munmap resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6071] <... write resumed>) = 524288 [ 75.587975][ T6070] loop2: detected capacity change from 0 to 1024 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_SET_FD, 3 [pid 6071] munmap(0x7fd6d9800000, 138412032 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6070] <... mount resumed>) = 0 [pid 6070] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6070] chdir("./file1") = 0 [pid 6073] <... write resumed>) = 524288 [pid 6071] <... munmap resumed>) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6070] chdir("./file0"./strace-static-x86_64: Process 6074 attached [pid 6071] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6070] <... chdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6074 [pid 6070] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6071] <... openat resumed>) = 4 [pid 6071] ioctl(4, LOOP_SET_FD, 3 [pid 6070] <... openat resumed>) = 4 [pid 6073] munmap(0x7fd6d9800000, 138412032 [pid 6070] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6073] <... munmap resumed>) = 0 [pid 6072] <... ioctl resumed>) = 0 [pid 6074] set_robust_list(0x555557df1660, 24 [pid 6073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6071] <... ioctl resumed>) = 0 [pid 6070] <... creat resumed>) = 5 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6073] <... openat resumed>) = 4 [pid 6072] close(3 [pid 6074] chdir("./46" [pid 6073] ioctl(4, LOOP_SET_FD, 3 [pid 6072] <... close resumed>) = 0 [pid 6071] close(3 [pid 6070] sync( [pid 6074] <... chdir resumed>) = 0 [pid 6072] close(4 [pid 6071] <... close resumed>) = 0 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6071] close(4 [pid 6074] <... prctl resumed>) = 0 [pid 6071] <... close resumed>) = 0 [pid 6074] setpgid(0, 0 [pid 6071] mkdir("./file1", 0777 [pid 6074] <... setpgid resumed>) = 0 [pid 6071] <... mkdir resumed>) = 0 [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6071] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6074] <... openat resumed>) = 3 [pid 6074] write(3, "1000", 4 [pid 6072] <... close resumed>) = 0 [pid 6074] <... write resumed>) = 4 [pid 6074] close(3) = 0 [pid 6074] symlink("/dev/binderfs", "./binderfs" [pid 6072] mkdir("./file1", 0777 [pid 6074] <... symlink resumed>) = 0 executing program [pid 6074] write(1, "executing program\n", 18 [pid 6072] <... mkdir resumed>) = 0 [pid 6074] <... write resumed>) = 18 [pid 6072] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6071] <... mount resumed>) = 0 [pid 6074] memfd_create("syzkaller", 0 [pid 6071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6074] <... memfd_create resumed>) = 3 [pid 6071] <... openat resumed>) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6071] chdir("./file1" [pid 6074] <... mmap resumed>) = 0x7fd6d9800000 [pid 6071] <... chdir resumed>) = 0 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6073] <... ioctl resumed>) = 0 [pid 6072] <... mount resumed>) = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6073] close(3 [pid 6072] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6073] <... close resumed>) = 0 [pid 6072] <... openat resumed>) = 3 [pid 6073] close(4 [pid 6072] chdir("./file1" [pid 6071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6072] <... chdir resumed>) = 0 [pid 6071] chdir("./file0" [pid 6073] <... close resumed>) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6073] mkdir("./file1", 0777 [pid 6072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6072] chdir("./file0" [pid 6071] <... chdir resumed>) = 0 [pid 6072] <... chdir resumed>) = 0 [pid 6071] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6073] <... mkdir resumed>) = 0 [pid 6072] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6071] <... openat resumed>) = 4 [pid 6070] <... sync resumed>) = 0 [pid 6073] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6071] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6070] exit_group(0) = ? [ 75.639249][ T6072] loop0: detected capacity change from 0 to 1024 [ 75.658836][ T6071] loop3: detected capacity change from 0 to 1024 [ 75.675507][ T6073] loop1: detected capacity change from 0 to 1024 [pid 6070] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6074] <... write resumed>) = 524288 [pid 6073] <... mount resumed>) = 0 [pid 6072] <... openat resumed>) = 4 [pid 6073] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6072] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 6073] chdir("./file1" [pid 6071] <... creat resumed>) = 5 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6073] <... chdir resumed>) = 0 [pid 6071] sync( [pid 5831] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] newfstatat(AT_FDCWD, "./46/binderfs", [pid 6073] chdir("./file0" [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./46/binderfs") = 0 [pid 5831] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6072] <... creat resumed>) = 5 [pid 6074] munmap(0x7fd6d9800000, 138412032 [pid 6073] <... chdir resumed>) = 0 [pid 6072] sync( [pid 6073] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = 0 [pid 6074] <... munmap resumed>) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6074] <... openat resumed>) = 4 [pid 6073] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6074] ioctl(4, LOOP_SET_FD, 3 [pid 6073] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./46/file1" [pid 6073] <... creat resumed>) = 5 [pid 5831] <... rmdir resumed>) = 0 [pid 6073] sync( [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./46") = 0 [pid 5831] mkdir("./47", 0777 [pid 6072] <... sync resumed>) = 0 [pid 6071] <... sync resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6071] exit_group(0) = ? [pid 6072] exit_group(0 [pid 6071] +++ exited with 0 +++ [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6074] <... ioctl resumed>) = 0 [pid 6072] <... exit_group resumed>) = ? [pid 5831] <... openat resumed>) = 3 [pid 6074] close(3) = 0 [pid 6074] close(4) = 0 [pid 6072] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... ioctl resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6072, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] close(3 [pid 6074] mkdir("./file1", 0777) = 0 [pid 6074] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6074] <... mount resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] newfstatat(3, "", [pid 6074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file1" [pid 6073] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6075 attached [pid 6074] <... chdir resumed>) = 0 [pid 6073] exit_group(0 [pid 5832] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6075 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5829] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./47/binderfs" [pid 5829] newfstatat(AT_FDCWD, "./46/binderfs", [pid 6075] set_robust_list(0x555557df1660, 24 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6073] <... exit_group resumed>) = ? [pid 6075] <... set_robust_list resumed>) = 0 [pid 6074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6073] +++ exited with 0 +++ [pid 5832] <... unlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6074] chdir("./file0" [pid 5832] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] unlink("./46/binderfs" [pid 6075] chdir("./47" [pid 5829] <... unlink resumed>) = 0 [pid 6075] <... chdir resumed>) = 0 [pid 5829] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6075] <... prctl resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6075] setpgid(0, 0 [pid 5830] newfstatat(3, "", [pid 6075] <... setpgid resumed>) = 0 [ 75.745963][ T6074] loop4: detected capacity change from 0 to 1024 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] getdents64(3, [pid 6075] <... openat resumed>) = 3 [pid 6074] <... chdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6075] write(3, "1000", 4 [pid 5830] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] <... write resumed>) = 4 [pid 6074] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./46/binderfs") = 0 [pid 5830] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] close(3) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 executing program [pid 6075] <... symlink resumed>) = 0 [pid 6075] write(1, "executing program\n", 18) = 18 [pid 6075] memfd_create("syzkaller", 0) = 3 [pid 6074] <... openat resumed>) = 4 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6074] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./46/file1", [pid 5832] newfstatat(AT_FDCWD, "./47/file1", [pid 5830] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./46/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6074] <... creat resumed>) = 5 [pid 5832] newfstatat(4, "", [pid 5830] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5832] getdents64(4, [pid 5830] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6074] sync( [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 4 [pid 5829] getdents64(4, [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] close(4 [pid 5829] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5829] close(4 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./47/file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... close resumed>) = 0 [pid 6075] <... write resumed>) = 524288 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] rmdir("./46/file1" [pid 5832] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5830] close(4 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 5832] rmdir("./47" [pid 5830] rmdir("./46/file1" [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] mkdir("./48", 0777 [pid 6075] munmap(0x7fd6d9800000, 138412032 [pid 6074] <... sync resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6074] exit_group(0 [pid 5830] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6074] <... exit_group resumed>) = ? [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] rmdir("./46" [pid 6075] <... munmap resumed>) = 0 [pid 6074] +++ exited with 0 +++ [pid 5832] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6074, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] close(3 [pid 5829] mkdir("./47", 0777 [pid 6075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] close(3 [pid 6075] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] rmdir("./46" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5830] mkdir("./47", 0777 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6076 attached [pid 5829] close(3 [pid 6076] set_robust_list(0x555557df1660, 24 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5833] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6076 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", [pid 5829] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6077 attached [pid 5833] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./46/binderfs") = 0 [pid 5833] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6077 [pid 6077] set_robust_list(0x555557df1660, 24 [pid 6076] <... set_robust_list resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 6077] <... set_robust_list resumed>) = 0 [pid 5830] close(3 [pid 6076] chdir("./48" [pid 6077] chdir("./47" [pid 6076] <... chdir resumed>) = 0 [pid 6077] <... chdir resumed>) = 0 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6077] setpgid(0, 0) = 0 [pid 6075] <... ioctl resumed>) = 0 [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6075] close(3 [pid 5833] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] <... openat resumed>) = 3 [pid 6075] <... close resumed>) = 0 [pid 6075] close(4) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6077] write(3, "1000", 4 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6075] mkdir("./file1", 0777 [pid 5833] newfstatat(AT_FDCWD, "./46/file1", [pid 5830] <... close resumed>) = 0 [pid 6077] <... write resumed>) = 4 [pid 6076] <... prctl resumed>) = 0 [pid 6075] <... mkdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6077] close(3) = 0 [pid 6076] setpgid(0, 0 [pid 6075] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./46/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6077] symlink("/dev/binderfs", "./binderfs" [pid 6076] <... setpgid resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6077] <... symlink resumed>) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5833] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6078 attached [pid 6077] write(1, "executing program\n", 18 [pid 6076] write(3, "1000", 4 [pid 5833] newfstatat(4, "", [pid 6078] set_robust_list(0x555557df1660, 24 [pid 6077] <... write resumed>) = 18 [pid 6076] <... write resumed>) = 4 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6076] close(3 [pid 6078] chdir("./47" [pid 6077] memfd_create("syzkaller", 0 [pid 6076] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs" [pid 6078] <... chdir resumed>) = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6077] <... memfd_create resumed>) = 3 [pid 6076] <... symlink resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6078 [pid 6078] <... prctl resumed>) = 0 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6076] write(1, "executing program\n", 18 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6078] setpgid(0, 0 [pid 6077] <... mmap resumed>) = 0x7fd6d9800000 [pid 6076] <... write resumed>) = 18 [pid 6075] <... mount resumed>) = 0 [pid 5833] getdents64(4, [pid 6078] <... setpgid resumed>) = 0 [ 75.871480][ T6075] loop2: detected capacity change from 0 to 1024 [pid 6076] memfd_create("syzkaller", 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6076] <... memfd_create resumed>) = 3 [pid 6078] <... openat resumed>) = 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6078] write(3, "1000", 4 [pid 6076] <... mmap resumed>) = 0x7fd6d9800000 [pid 6075] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6078] <... write resumed>) = 4 [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6078] close(3) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6076] <... write resumed>) = 524288 [pid 6075] <... openat resumed>) = 3 [pid 5833] close(4) = 0 [pid 6075] chdir("./file1" [pid 6078] write(1, "executing program\n", 18) = 18 [pid 6078] memfd_create("syzkaller", 0) = 3 [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6076] munmap(0x7fd6d9800000, 138412032 [pid 6078] <... mmap resumed>) = 0x7fd6d9800000 [pid 6076] <... munmap resumed>) = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6075] <... chdir resumed>) = 0 [pid 5833] rmdir("./46/file1" [pid 6076] <... openat resumed>) = 4 [pid 6075] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 6076] ioctl(4, LOOP_SET_FD, 3 [pid 6075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] getdents64(3, [pid 6077] <... write resumed>) = 524288 [pid 6075] chdir("./file0" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./46" [pid 6077] munmap(0x7fd6d9800000, 138412032 [pid 6075] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./47", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6077] <... munmap resumed>) = 0 [pid 6075] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6075] <... openat resumed>) = 4 [pid 6077] <... openat resumed>) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 6075] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6076] <... ioctl resumed>) = 0 [pid 6076] close(3 [pid 5833] <... close resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 6076] close(4) = 0 [pid 6076] mkdir("./file1", 0777) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6078] <... write resumed>) = 524288 [pid 6076] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, ""./strace-static-x86_64: Process 6079 attached [pid 6078] munmap(0x7fd6d9800000, 138412032 [pid 6075] <... creat resumed>) = 5 [pid 6079] set_robust_list(0x555557df1660, 24) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6079 [pid 6079] chdir("./47") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6079] write(1, "executing program\n", 18) = 18 [pid 6079] memfd_create("syzkaller", 0 [pid 6078] <... munmap resumed>) = 0 [pid 6076] <... mount resumed>) = 0 [pid 6075] sync( [pid 6078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6079] <... memfd_create resumed>) = 3 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6078] <... openat resumed>) = 4 [pid 6077] <... ioctl resumed>) = 0 [ 75.956213][ T6076] loop3: detected capacity change from 0 to 1024 [ 75.990844][ T6077] loop0: detected capacity change from 0 to 1024 [pid 6076] <... openat resumed>) = 3 [pid 6079] <... mmap resumed>) = 0x7fd6d9800000 [pid 6078] ioctl(4, LOOP_SET_FD, 3 [pid 6077] close(3 [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6077] <... close resumed>) = 0 [pid 6076] chdir("./file1") = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6077] close(4 [pid 6076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6077] <... close resumed>) = 0 [pid 6076] chdir("./file0" [pid 6077] mkdir("./file1", 0777) = 0 [pid 6079] <... write resumed>) = 524288 [pid 6078] <... ioctl resumed>) = 0 [pid 6076] <... chdir resumed>) = 0 [pid 6079] munmap(0x7fd6d9800000, 138412032 [pid 6078] close(3 [pid 6077] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6076] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6075] <... sync resumed>) = 0 [pid 6079] <... munmap resumed>) = 0 [pid 6078] <... close resumed>) = 0 [pid 6076] <... openat resumed>) = 4 [pid 6078] close(4 [pid 6079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6075] exit_group(0 [pid 6079] <... openat resumed>) = 4 [pid 6078] <... close resumed>) = 0 [pid 6076] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6075] <... exit_group resumed>) = ? [pid 6078] mkdir("./file1", 0777 [pid 6079] ioctl(4, LOOP_SET_FD, 3 [pid 6078] <... mkdir resumed>) = 0 [pid 6075] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6078] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] <... creat resumed>) = 5 [pid 5831] <... openat resumed>) = 3 [pid 6077] <... mount resumed>) = 0 [pid 6076] sync( [pid 5831] newfstatat(3, "", [pid 6077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 6078] <... mount resumed>) = 0 [pid 6077] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6077] chdir("./file1" [pid 5831] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] <... chdir resumed>) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./47/binderfs", [pid 6078] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6077] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6078] <... openat resumed>) = 3 [pid 6078] chdir("./file1" [pid 6077] chdir("./file0" [pid 5831] unlink("./47/binderfs" [pid 6079] <... ioctl resumed>) = 0 [pid 6078] <... chdir resumed>) = 0 [pid 6077] <... chdir resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6079] close(3 [pid 6078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6079] <... close resumed>) = 0 [pid 6078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6077] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6076] <... sync resumed>) = 0 [pid 5831] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6079] close(4 [pid 6078] chdir("./file0" [pid 6079] <... close resumed>) = 0 [pid 6076] exit_group(0 [pid 6078] <... chdir resumed>) = 0 [pid 6076] <... exit_group resumed>) = ? [pid 6078] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6076] +++ exited with 0 +++ [pid 6078] <... openat resumed>) = 4 [pid 6077] <... openat resumed>) = 4 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6079] mkdir("./file1", 0777 [ 76.014236][ T6078] loop1: detected capacity change from 0 to 1024 [ 76.047586][ T6079] loop4: detected capacity change from 0 to 1024 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6078] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6079] <... mkdir resumed>) = 0 [pid 6077] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6079] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6078] <... creat resumed>) = 5 [pid 6077] <... creat resumed>) = 5 [pid 5831] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] sync( [pid 6078] sync( [pid 5832] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./47/file1", [pid 5832] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(3, "", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... openat resumed>) = 4 [pid 5832] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(4, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5832] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] unlink("./48/binderfs" [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 6079] <... mount resumed>) = 0 [pid 6078] <... sync resumed>) = 0 [pid 6077] <... sync resumed>) = 0 [pid 5831] close(4 [pid 5832] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 6079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6078] exit_group(0) = ? [pid 6079] <... openat resumed>) = 3 [pid 6078] +++ exited with 0 +++ [pid 6077] exit_group(0 [pid 5831] rmdir("./47/file1" [pid 6079] chdir("./file1" [pid 6077] <... exit_group resumed>) = ? [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6079] <... chdir resumed>) = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6077] +++ exited with 0 +++ [pid 6079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6079] chdir("./file0" [pid 5831] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./47") = 0 [pid 5831] mkdir("./48", 0777) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6079] <... chdir resumed>) = 0 [pid 5832] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./48/file1", [pid 6079] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(4, "", [pid 5831] close(3 [pid 6079] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 3 [pid 5829] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6079] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... openat resumed>) = 3 [pid 5830] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5829] getdents64(3, [pid 6079] <... creat resumed>) = 5 [pid 5832] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] unlink("./47/binderfs" [pid 5829] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6080 attached [pid 6079] sync( [pid 5832] getdents64(4, [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6080] set_robust_list(0x555557df1660, 24 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./47/binderfs", [pid 6080] <... set_robust_list resumed>) = 0 [pid 5832] close(4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6080 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] chdir("./48" [pid 5832] <... close resumed>) = 0 [pid 5829] unlink("./47/binderfs" [pid 6080] <... chdir resumed>) = 0 [pid 5832] rmdir("./48/file1" [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6080] setpgid(0, 0 [pid 5829] <... unlink resumed>) = 0 [pid 5830] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./47/file1", [pid 5829] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6080] <... setpgid resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] getdents64(3, [pid 5830] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6080] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 6080] write(3, "1000", 4 [pid 5832] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6080] <... write resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... umount2 resumed>) = 0 [pid 6080] close(3 [pid 5832] rmdir("./48" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6080] <... close resumed>) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5832] <... rmdir resumed>) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./47/file1" [pid 6080] <... symlink resumed>) = 0 [pid 6080] write(1, "executing program\n", 18executing program ) = 18 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6080] memfd_create("syzkaller", 0 [pid 6079] <... sync resumed>) = 0 [pid 5832] mkdir("./49", 0777 [pid 5830] getdents64(3, [pid 6080] <... memfd_create resumed>) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] newfstatat(AT_FDCWD, "./47/file1", [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6079] exit_group(0 [pid 5830] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6079] <... exit_group resumed>) = ? [pid 5830] rmdir("./47" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6080] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", [pid 5830] mkdir("./48", 0777 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] rmdir("./47/file1" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... rmdir resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6079] +++ exited with 0 +++ [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 6080] <... write resumed>) = 524288 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] <... openat resumed>) = 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] close(3 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5829] rmdir("./47") = 0 [pid 5829] mkdir("./48", 0777 [pid 5833] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6081 attached [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6081] set_robust_list(0x555557df1660, 24 [pid 6080] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6081 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6081] <... set_robust_list resumed>) = 0 [pid 5833] getdents64(3, [pid 6080] <... munmap resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6081] chdir("./48" [pid 5829] <... openat resumed>) = 3 [pid 5833] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 6081] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6082 attached [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] newfstatat(AT_FDCWD, "./47/binderfs", [pid 6081] <... prctl resumed>) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6082 [pid 5829] <... close resumed>) = 0 [pid 6081] setpgid(0, 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] <... openat resumed>) = 4 [pid 6082] set_robust_list(0x555557df1660, 24 [pid 6081] <... setpgid resumed>) = 0 [pid 6080] ioctl(4, LOOP_SET_FD, 3 [pid 5833] unlink("./47/binderfs" [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6082] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6083 attached [pid 6082] chdir("./49" [pid 5833] <... unlink resumed>) = 0 [pid 6082] <... chdir resumed>) = 0 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6083] set_robust_list(0x555557df1660, 24 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6081] <... openat resumed>) = 3 [pid 5833] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6083 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6083] chdir("./48" [pid 6082] <... prctl resumed>) = 0 [pid 6081] write(3, "1000", 4 [pid 6083] <... chdir resumed>) = 0 [pid 6081] <... write resumed>) = 4 [pid 6082] setpgid(0, 0) = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6081] close(3 [pid 6083] write(3, "1000", 4) = 4 [pid 6083] close(3 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 6081] <... close resumed>) = 0 [pid 6083] <... close resumed>) = 0 [pid 6081] symlink("/dev/binderfs", "./binderfs" [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6082] <... openat resumed>) = 3 [pid 6081] <... symlink resumed>) = 0 [pid 6083] write(1, "executing program\n", 18executing program [pid 6081] write(1, "executing program\n", 18 [pid 6083] <... write resumed>) = 18 [pid 6082] write(3, "1000", 4 [pid 6083] memfd_create("syzkaller", 0 [pid 6081] <... write resumed>) = 18 [pid 6083] <... memfd_create resumed>) = 3 [pid 6082] <... write resumed>) = 4 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6082] close(3 [pid 6081] memfd_create("syzkaller", 0 [pid 6082] <... close resumed>) = 0 [pid 6080] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6081] <... memfd_create resumed>) = 3 [pid 6080] close(3 [pid 6082] symlink("/dev/binderfs", "./binderfs" [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6080] <... close resumed>) = 0 [pid 5833] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6082] <... symlink resumed>) = 0 [pid 6081] <... mmap resumed>) = 0x7fd6d9800000 [pid 6080] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6082] write(1, "executing program\n", 18 [pid 6080] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./47/file1", [pid 6082] <... write resumed>) = 18 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6082] memfd_create("syzkaller", 0 [pid 6080] mkdir("./file1", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6082] <... memfd_create resumed>) = 3 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6080] <... mkdir resumed>) = 0 [pid 5833] umount2("./47/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6082] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6080] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... openat resumed>) = 4 [pid 6083] <... write resumed>) = 524288 [pid 5833] newfstatat(4, "", [pid 6083] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6083] <... munmap resumed>) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 76.246454][ T6080] loop2: detected capacity change from 0 to 1024 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6083] ioctl(4, LOOP_SET_FD, 3 [pid 5833] getdents64(4, [pid 6081] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6082] <... write resumed>) = 524288 [pid 5833] close(4) = 0 [pid 5833] rmdir("./47/file1") = 0 [pid 6083] <... ioctl resumed>) = 0 [pid 6082] munmap(0x7fd6d9800000, 138412032 [pid 6081] munmap(0x7fd6d9800000, 138412032 [pid 5833] getdents64(3, [pid 6082] <... munmap resumed>) = 0 [pid 6083] close(3) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] close(3 [pid 6082] <... openat resumed>) = 4 [pid 5833] <... close resumed>) = 0 [pid 6083] close(4 [pid 6082] ioctl(4, LOOP_SET_FD, 3 [pid 6081] <... munmap resumed>) = 0 [pid 5833] rmdir("./47" [pid 6083] <... close resumed>) = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6080] <... mount resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6083] mkdir("./file1", 0777 [pid 6081] <... openat resumed>) = 4 [pid 6080] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6083] <... mkdir resumed>) = 0 [pid 6081] ioctl(4, LOOP_SET_FD, 3 [pid 6080] <... openat resumed>) = 3 [pid 6083] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6080] chdir("./file1") = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6080] chdir("./file0") = 0 [pid 6080] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6082] <... ioctl resumed>) = 0 [pid 6080] <... openat resumed>) = 4 [pid 5833] mkdir("./48", 0777 [pid 6082] close(3) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6083] <... mount resumed>) = 0 [pid 6082] close(4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6082] <... close resumed>) = 0 [pid 6083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6082] mkdir("./file1", 0777 [pid 6080] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 3 [pid 6083] <... openat resumed>) = 3 [pid 6082] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6083] chdir("./file1" [pid 6082] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6083] <... chdir resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6081] <... ioctl resumed>) = 0 [pid 6080] <... creat resumed>) = 5 [pid 5833] close(3 [pid 6083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6081] close(3 [pid 6083] chdir("./file0" [pid 6081] <... close resumed>) = 0 [pid 6081] close(4 [pid 6080] sync( [pid 6081] <... close resumed>) = 0 [pid 6081] mkdir("./file1", 0777) = 0 [pid 5833] <... close resumed>) = 0 [pid 6081] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6083] <... chdir resumed>) = 0 [pid 6082] <... mount resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6082] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6084 attached [pid 6083] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6082] <... openat resumed>) = 3 [ 76.303439][ T6083] loop0: detected capacity change from 0 to 1024 [ 76.327338][ T6081] loop1: detected capacity change from 0 to 1024 [ 76.332335][ T6082] loop3: detected capacity change from 0 to 1024 [pid 6084] set_robust_list(0x555557df1660, 24) = 0 [pid 6083] <... openat resumed>) = 4 [pid 6082] chdir("./file1" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6084 [pid 6084] chdir("./48" [pid 6083] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6082] <... chdir resumed>) = 0 [pid 6084] <... chdir resumed>) = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6082] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6084] <... prctl resumed>) = 0 [pid 6083] <... creat resumed>) = 5 [pid 6082] chdir("./file0" [pid 6084] setpgid(0, 0 [pid 6083] sync( [pid 6084] <... setpgid resumed>) = 0 [pid 6084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6082] <... chdir resumed>) = 0 [pid 6081] <... mount resumed>) = 0 [pid 6080] <... sync resumed>) = 0 [pid 6084] <... openat resumed>) = 3 [pid 6082] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6081] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6080] exit_group(0 [pid 6084] write(3, "1000", 4 [pid 6082] <... openat resumed>) = 4 [pid 6081] <... openat resumed>) = 3 [pid 6080] <... exit_group resumed>) = ? [pid 6084] <... write resumed>) = 4 [pid 6081] chdir("./file1") = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6081] chdir("./file0" [pid 6084] close(3 [pid 6081] <... chdir resumed>) = 0 [pid 6080] +++ exited with 0 +++ [pid 6084] <... close resumed>) = 0 [pid 6082] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6080, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6083] <... sync resumed>) = 0 [pid 6081] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6084] symlink("/dev/binderfs", "./binderfs" [pid 6083] exit_group(0 [pid 6081] <... openat resumed>) = 4 [pid 6084] <... symlink resumed>) = 0 [pid 6083] <... exit_group resumed>) = ? executing program [pid 6081] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6084] write(1, "executing program\n", 18 [pid 6082] <... creat resumed>) = 5 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6084] <... write resumed>) = 18 [pid 6082] sync( [pid 6084] memfd_create("syzkaller", 0 [pid 5831] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] <... memfd_create resumed>) = 3 [pid 6081] <... creat resumed>) = 5 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... openat resumed>) = 3 [pid 6084] <... mmap resumed>) = 0x7fd6d9800000 [pid 6083] +++ exited with 0 +++ [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] getdents64(3, [pid 6081] sync( [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./48/binderfs" [pid 6084] <... write resumed>) = 524288 [pid 5831] <... unlink resumed>) = 0 [pid 6084] munmap(0x7fd6d9800000, 138412032 [pid 5831] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] <... munmap resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./48/binderfs") = 0 [pid 5829] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [pid 6082] <... sync resumed>) = 0 [pid 6081] <... sync resumed>) = 0 [pid 6082] exit_group(0 [pid 6081] exit_group(0 [pid 5831] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 6082] <... exit_group resumed>) = ? [pid 6081] <... exit_group resumed>) = ? [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... ioctl resumed>) = 0 [pid 6081] +++ exited with 0 +++ [pid 6084] close(3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] <... close resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./48/file1", [pid 6082] +++ exited with 0 +++ [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./48/file1", [pid 5831] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6084] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] mkdir("./file1", 0777 [pid 5832] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(4, "", [pid 5830] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(4, "", [pid 5831] getdents64(4, [pid 5832] newfstatat(3, "", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] close(4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... close resumed>) = 0 [pid 5832] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./48/file1" [pid 5830] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5830] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5829] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6084] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 6084] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] unlink("./49/binderfs" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] unlink("./48/binderfs" [pid 5829] rmdir("./48/file1" [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 5831] rmdir("./48" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6084] <... mount resumed>) = 0 [pid 5832] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] rmdir("./48" [pid 6084] <... openat resumed>) = 3 [ 76.455223][ T6084] loop4: detected capacity change from 0 to 1024 [pid 6084] chdir("./file1" [pid 5832] <... umount2 resumed>) = 0 [pid 5831] mkdir("./49", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] mkdir("./49", 0777 [pid 5832] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] close(4) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] rmdir("./49/file1" [pid 5829] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6084] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6084] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 3 [pid 5830] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6084] chdir("./file0" [pid 5832] getdents64(3, [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./48/file1", [pid 5831] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./49") = 0 [pid 5832] mkdir("./50", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 6084] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6086 attached ./strace-static-x86_64: Process 6085 attached [pid 6084] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6087 attached [pid 6084] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6085 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6086 [pid 5830] newfstatat(4, "", [pid 6085] set_robust_list(0x555557df1660, 24 [pid 6087] set_robust_list(0x555557df1660, 24 [pid 6086] set_robust_list(0x555557df1660, 24 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6087 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6085] <... set_robust_list resumed>) = 0 [pid 5830] getdents64(4, [pid 6087] chdir("./49" [pid 6084] <... creat resumed>) = 5 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6084] sync( [pid 5830] getdents64(4, [pid 6087] <... chdir resumed>) = 0 [pid 6086] chdir("./49" [pid 6085] chdir("./50" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] close(4 [pid 6087] <... prctl resumed>) = 0 [pid 6086] <... chdir resumed>) = 0 [pid 6085] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6087] setpgid(0, 0 [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] rmdir("./48/file1" [pid 6087] <... setpgid resumed>) = 0 [pid 6086] <... prctl resumed>) = 0 [pid 6085] <... prctl resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6086] setpgid(0, 0 [pid 6085] setpgid(0, 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6086] <... setpgid resumed>) = 0 [pid 6085] <... setpgid resumed>) = 0 [pid 6087] <... openat resumed>) = 3 [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6087] write(3, "1000", 4 [pid 6086] <... openat resumed>) = 3 [pid 6085] <... openat resumed>) = 3 [pid 6087] <... write resumed>) = 4 [pid 6084] <... sync resumed>) = 0 [pid 5830] getdents64(3, [pid 6087] close(3 [pid 6085] write(3, "1000", 4 [pid 6087] <... close resumed>) = 0 [pid 6086] write(3, "1000", 4 [pid 6085] <... write resumed>) = 4 [pid 6086] <... write resumed>) = 4 [pid 6085] close(3) = 0 [pid 6087] symlink("/dev/binderfs", "./binderfs" [pid 6086] close(3 [pid 6085] symlink("/dev/binderfs", "./binderfs"executing program [pid 6087] <... symlink resumed>) = 0 [pid 6086] <... close resumed>) = 0 [pid 6085] <... symlink resumed>) = 0 [pid 6084] exit_group(0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs" [pid 6085] write(1, "executing program\n", 18 [pid 6086] <... symlink resumed>) = 0 [pid 6085] <... write resumed>) = 18 [pid 5830] close(3 [pid 6087] write(1, "executing program\n", 18executing program executing program [pid 6086] write(1, "executing program\n", 18 [pid 6085] memfd_create("syzkaller", 0 [pid 5830] <... close resumed>) = 0 [pid 6087] <... write resumed>) = 18 [pid 6086] <... write resumed>) = 18 [pid 6085] <... memfd_create resumed>) = 3 [pid 6084] <... exit_group resumed>) = ? [pid 6087] memfd_create("syzkaller", 0 [pid 6086] memfd_create("syzkaller", 0 [pid 6087] <... memfd_create resumed>) = 3 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6086] <... memfd_create resumed>) = 3 [pid 6085] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] rmdir("./48" [pid 6087] <... mmap resumed>) = 0x7fd6d9800000 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6084] +++ exited with 0 +++ [pid 6086] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6084, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] mkdir("./49", 0777 [pid 6085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... mkdir resumed>) = 0 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6085] <... write resumed>) = 524288 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 6085] munmap(0x7fd6d9800000, 138412032 [pid 5833] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... close resumed>) = 0 [pid 6085] <... munmap resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6085] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5833] newfstatat(3, "", [pid 6085] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6086] <... write resumed>) = 524288 [pid 5833] getdents64(3, [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6088 attached [pid 6085] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6088] set_robust_list(0x555557df1660, 24 [pid 5833] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6088 [pid 6088] <... set_robust_list resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] chdir("./49" [pid 6087] <... write resumed>) = 524288 [pid 5833] newfstatat(AT_FDCWD, "./48/binderfs", [pid 6086] munmap(0x7fd6d9800000, 138412032 [pid 6088] <... chdir resumed>) = 0 [pid 6086] <... munmap resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6087] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5833] unlink("./48/binderfs" [pid 6086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5833] <... unlink resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6086] ioctl(4, LOOP_SET_FD, 3 [pid 6087] <... openat resumed>) = 4 [pid 6086] <... ioctl resumed>) = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6085] close(3 [pid 5833] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... prctl resumed>) = 0 [pid 6088] setpgid(0, 0 [pid 6085] <... close resumed>) = 0 [pid 6085] close(4) = 0 [pid 6085] mkdir("./file1", 0777) = 0 [pid 6085] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6086] close(3) = 0 [pid 6086] close(4) = 0 [pid 6086] mkdir("./file1", 0777) = 0 [pid 6087] <... ioctl resumed>) = 0 [pid 6087] close(3) = 0 [pid 6087] close(4) = 0 [pid 6086] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6088] <... setpgid resumed>) = 0 [pid 6087] mkdir("./file1", 0777) = 0 [pid 6085] <... mount resumed>) = 0 [pid 6085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6087] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6086] <... mount resumed>) = 0 [pid 6085] <... openat resumed>) = 3 [pid 6088] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = 0 [pid 6086] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6085] chdir("./file1" [pid 5833] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6086] <... openat resumed>) = 3 [pid 6085] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] write(3, "1000", 4 [pid 6086] chdir("./file1" [pid 6085] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./48/file1", [pid 6088] <... write resumed>) = 4 [pid 6087] <... mount resumed>) = 0 [pid 6086] <... chdir resumed>) = 0 [pid 6085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6088] close(3 [pid 6087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6085] chdir("./file0" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6088] <... close resumed>) = 0 [pid 6087] <... openat resumed>) = 3 [pid 6086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6087] chdir("./file1") = 0 [pid 6086] chdir("./file0" [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6087] chdir("./file0" [pid 6088] symlink("/dev/binderfs", "./binderfs" [pid 6087] <... chdir resumed>) = 0 [pid 6085] <... chdir resumed>) = 0 [pid 5833] umount2("./48/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... symlink resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6085] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 76.636990][ T1205] cfg80211: failed to load regulatory.db [ 76.643032][ T6085] loop3: detected capacity change from 0 to 1024 [ 76.654839][ T6086] loop2: detected capacity change from 0 to 1024 [ 76.673528][ T6087] loop0: detected capacity change from 0 to 1024 [pid 6088] write(1, "executing program\n", 18executing program [pid 6086] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6088] <... write resumed>) = 18 [pid 6087] <... openat resumed>) = 4 [pid 6085] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 6088] memfd_create("syzkaller", 0 [pid 6087] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6086] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6085] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(4, "", [pid 6088] <... memfd_create resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] getdents64(4, [pid 6088] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6086] <... openat resumed>) = 4 [pid 6087] <... creat resumed>) = 5 [pid 6086] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6087] sync( [pid 6085] <... creat resumed>) = 5 [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] getdents64(4, [pid 6085] sync( [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6086] <... creat resumed>) = 5 [pid 6086] sync( [pid 5833] close(4) = 0 [pid 5833] rmdir("./48/file1") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6088] <... write resumed>) = 524288 [pid 6087] <... sync resumed>) = 0 [pid 6086] <... sync resumed>) = 0 [pid 6085] <... sync resumed>) = 0 [pid 5833] close(3 [pid 6085] exit_group(0) = ? [pid 6085] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6087] exit_group(0 [pid 6086] exit_group(0 [pid 5833] <... close resumed>) = 0 [pid 6087] <... exit_group resumed>) = ? [pid 6086] <... exit_group resumed>) = ? [pid 5833] rmdir("./48" [pid 6087] +++ exited with 0 +++ [pid 6086] +++ exited with 0 +++ [pid 5833] <... rmdir resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6088] munmap(0x7fd6d9800000, 138412032 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6088] <... munmap resumed>) = 0 [pid 5833] mkdir("./49", 0777) = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6086, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6088] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... openat resumed>) = 3 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... restart_syscall resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] getdents64(3, [pid 5829] newfstatat(3, "", [pid 5833] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5831] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5832] unlink("./50/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5829] unlink("./49/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5831] getdents64(3, [pid 5832] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... ioctl resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6089 attached [pid 6088] close(3) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6089 [pid 6088] close(4 [pid 6089] set_robust_list(0x555557df1660, 24 [pid 6088] <... close resumed>) = 0 [pid 6089] <... set_robust_list resumed>) = 0 [pid 6088] mkdir("./file1", 0777 [pid 6089] chdir("./49" [pid 6088] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6088] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... chdir resumed>) = 0 [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6089] setpgid(0, 0) = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./49/binderfs", [pid 6089] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./49/binderfs" [pid 6089] write(3, "1000", 4) = 4 [pid 5831] <... unlink resumed>) = 0 [pid 6089] close(3 [pid 5831] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6089] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6088] <... mount resumed>) = 0 [pid 6089] write(1, "executing program\n", 18 [pid 6088] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6089] <... write resumed>) = 18 [pid 6088] <... openat resumed>) = 3 [pid 5829] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] memfd_create("syzkaller", 0 [pid 6088] chdir("./file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./49/file1", [pid 6089] <... memfd_create resumed>) = 3 [pid 6088] <... chdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6088] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... mmap resumed>) = 0x7fd6d9800000 [pid 6088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 76.774424][ T6088] loop1: detected capacity change from 0 to 1024 [pid 6088] chdir("./file0" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5831] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5831] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6088] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 4 [pid 6088] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(AT_FDCWD, "./50/file1", [pid 5831] newfstatat(4, "", [pid 5829] getdents64(4, [pid 6088] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5832] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] close(4 [pid 5831] getdents64(4, [pid 5832] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 6088] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] newfstatat(4, "", [pid 5831] close(4 [pid 5829] rmdir("./49/file1" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] rmdir("./49/file1" [pid 5829] getdents64(3, [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6088] <... creat resumed>) = 5 [pid 5832] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 6089] <... write resumed>) = 524288 [pid 5832] close(4 [pid 5831] getdents64(3, [pid 5829] rmdir("./49" [pid 6088] sync( [pid 5832] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] rmdir("./50/file1") = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] mkdir("./50", 0777 [pid 5831] close(3) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6089] munmap(0x7fd6d9800000, 138412032 [pid 6088] <... sync resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] rmdir("./49" [pid 6088] exit_group(0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6089] <... munmap resumed>) = 0 [pid 6088] <... exit_group resumed>) = ? [pid 5832] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 6088] +++ exited with 0 +++ [pid 5832] rmdir("./50" [pid 5831] mkdir("./50", 0777 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6089] <... openat resumed>) = 4 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6089] ioctl(4, LOOP_SET_FD, 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] close(3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] mkdir("./51", 0777 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6089] <... ioctl resumed>) = 0 [pid 6089] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6089] close(4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6089] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 6089] mkdir("./file1", 0777 [pid 5832] close(3 [pid 6089] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6089] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6090 attached [pid 5831] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./49/binderfs" [pid 6089] <... mount resumed>) = 0 [pid 6089] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... unlink resumed>) = 0 [pid 6089] <... openat resumed>) = 3 [pid 5830] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] chdir("./file1" [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6090 [pid 6089] <... chdir resumed>) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6089] chdir("./file0" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6091 attached [pid 6089] <... chdir resumed>) = 0 [pid 6091] set_robust_list(0x555557df1660, 24 [ 76.875298][ T6089] loop4: detected capacity change from 0 to 1024 [pid 6090] set_robust_list(0x555557df1660, 24 [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6091] <... set_robust_list resumed>) = 0 [pid 6090] <... set_robust_list resumed>) = 0 [pid 6089] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] chdir("./50" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... chdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6091 [pid 5830] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6092 attached [pid 6091] chdir("./51" [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6092] set_robust_list(0x555557df1660, 24 [pid 6090] <... prctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6092 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] <... set_robust_list resumed>) = 0 [pid 6091] <... chdir resumed>) = 0 [pid 6090] setpgid(0, 0 [pid 6089] <... openat resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... setpgid resumed>) = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... openat resumed>) = 4 [pid 6091] <... prctl resumed>) = 0 [pid 6091] setpgid(0, 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] newfstatat(4, "", [pid 6092] chdir("./50" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6091] <... setpgid resumed>) = 0 [pid 5830] getdents64(4, [pid 6092] <... chdir resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6091] <... openat resumed>) = 3 [pid 6090] <... openat resumed>) = 3 [pid 5830] getdents64(4, [pid 6092] <... prctl resumed>) = 0 [pid 6090] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6092] setpgid(0, 0 [pid 6090] <... write resumed>) = 4 [pid 5830] close(4 [pid 6090] close(3 [pid 6091] write(3, "1000", 4 [pid 6090] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6092] <... setpgid resumed>) = 0 [pid 6091] <... write resumed>) = 4 [pid 6090] symlink("/dev/binderfs", "./binderfs" [pid 5830] rmdir("./49/file1" [pid 6091] close(3 [pid 6089] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6091] <... close resumed>) = 0 [pid 6090] <... symlink resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs" [pid 6092] <... openat resumed>) = 3 [pid 6091] <... symlink resumed>) = 0 executing program executing program [pid 6090] write(1, "executing program\n", 18 [pid 5830] getdents64(3, [pid 6092] write(3, "1000", 4 [pid 6091] write(1, "executing program\n", 18 [pid 6090] <... write resumed>) = 18 [pid 6089] <... creat resumed>) = 5 [pid 6092] <... write resumed>) = 4 [pid 6091] <... write resumed>) = 18 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6092] close(3 [pid 6091] memfd_create("syzkaller", 0 [pid 6090] memfd_create("syzkaller", 0 [pid 5830] close(3 [pid 6092] <... close resumed>) = 0 [pid 6090] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs" [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] rmdir("./49" [pid 6092] <... symlink resumed>) = 0 [pid 6091] <... memfd_create resumed>) = 3 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6092] write(1, "executing program\n", 18 [pid 6091] <... mmap resumed>) = 0x7fd6d9800000 [pid 6090] <... mmap resumed>) = 0x7fd6d9800000 [pid 6089] sync( [pid 5830] <... rmdir resumed>) = 0 [pid 6092] <... write resumed>) = 18 [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6092] memfd_create("syzkaller", 0 [pid 5830] mkdir("./50", 0777 [pid 6092] <... memfd_create resumed>) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6092] <... mmap resumed>) = 0x7fd6d9800000 [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 6091] <... write resumed>) = 524288 [pid 5830] <... close resumed>) = 0 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6091] munmap(0x7fd6d9800000, 138412032 [pid 6090] <... write resumed>) = 524288 [pid 6089] <... sync resumed>) = 0 [pid 6091] <... munmap resumed>) = 0 [pid 6089] exit_group(0 [pid 6091] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6089] <... exit_group resumed>) = ? [pid 6091] <... openat resumed>) = 4 [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6090] munmap(0x7fd6d9800000, 138412032 [pid 6089] +++ exited with 0 +++ [pid 6090] <... munmap resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6092] <... write resumed>) = 524288 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6093 attached [pid 6092] munmap(0x7fd6d9800000, 138412032 [pid 6090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6093 [pid 6093] set_robust_list(0x555557df1660, 24 [pid 6092] <... munmap resumed>) = 0 [pid 6090] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] <... set_robust_list resumed>) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6090] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./49/binderfs") = 0 [pid 5833] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6091] <... ioctl resumed>) = 0 [pid 6091] close(3) = 0 [pid 6092] <... openat resumed>) = 4 [pid 6091] close(4) = 0 [pid 6091] mkdir("./file1", 0777 [pid 6093] chdir("./50" [pid 6092] ioctl(4, LOOP_SET_FD, 3 [pid 6091] <... mkdir resumed>) = 0 [pid 6091] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "") = 0 [pid 6091] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6091] chdir("./file1" [pid 5833] <... umount2 resumed>) = 0 [pid 6091] <... chdir resumed>) = 0 [pid 6093] <... chdir resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6091] chdir("./file0" [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6093] setpgid(0, 0 [pid 6092] <... ioctl resumed>) = 0 [pid 6093] <... setpgid resumed>) = 0 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6092] close(3 [pid 6090] <... ioctl resumed>) = 0 [pid 5833] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] <... openat resumed>) = 3 [pid 6093] write(3, "1000", 4 [pid 6092] <... close resumed>) = 0 [pid 6090] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6093] <... write resumed>) = 4 [pid 6092] close(4 [pid 6090] <... close resumed>) = 0 [pid 6093] close(3 [pid 6090] close(4 [pid 6093] <... close resumed>) = 0 [pid 6092] <... close resumed>) = 0 [pid 6093] symlink("/dev/binderfs", "./binderfs" [pid 6092] mkdir("./file1", 0777 [pid 6090] <... close resumed>) = 0 [pid 6093] <... symlink resumed>) = 0 [pid 6092] <... mkdir resumed>) = 0 [pid 6091] <... chdir resumed>) = 0 [pid 6090] mkdir("./file1", 0777 [pid 5833] newfstatat(AT_FDCWD, "./49/file1", [pid 6093] write(1, "executing program\n", 18 [pid 6092] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./49/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6093] <... write resumed>) = 18 [pid 6090] <... mkdir resumed>) = 0 [pid 6093] memfd_create("syzkaller", 0 [ 77.012356][ T6091] loop3: detected capacity change from 0 to 1024 [ 77.033445][ T6090] loop0: detected capacity change from 0 to 1024 [ 77.052958][ T6092] loop2: detected capacity change from 0 to 1024 [pid 6091] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6090] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6093] <... memfd_create resumed>) = 3 [pid 6091] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 6093] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6091] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./49/file1" [pid 6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 6091] <... creat resumed>) = 5 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./49") = 0 [pid 6091] sync( [pid 5833] mkdir("./50", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 6092] <... mount resumed>) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6094 attached [pid 6092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6090] <... mount resumed>) = 0 [pid 6090] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6092] <... openat resumed>) = 3 [pid 6090] <... openat resumed>) = 3 [pid 6090] chdir("./file1" [pid 6094] set_robust_list(0x555557df1660, 24 [pid 6092] chdir("./file1" [pid 6090] <... chdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6094 [pid 6093] <... write resumed>) = 524288 [pid 6092] <... chdir resumed>) = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6094] <... set_robust_list resumed>) = 0 [pid 6093] munmap(0x7fd6d9800000, 138412032 [pid 6092] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6090] chdir("./file0" [pid 6092] chdir("./file0" [pid 6094] chdir("./50") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6093] <... munmap resumed>) = 0 [pid 6091] <... sync resumed>) = 0 [pid 6091] exit_group(0 [pid 6094] <... openat resumed>) = 3 [pid 6091] <... exit_group resumed>) = ? [pid 6094] write(3, "1000", 4 [pid 6091] +++ exited with 0 +++ [pid 6094] <... write resumed>) = 4 [pid 6094] close(3 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6094] <... close resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6094] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6094] write(1, "executing program\n", 18) = 18 [pid 6094] memfd_create("syzkaller", 0 [pid 6092] <... chdir resumed>) = 0 [pid 6094] <... memfd_create resumed>) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6090] <... chdir resumed>) = 0 [pid 6093] <... openat resumed>) = 4 [pid 6092] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6090] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] <... mmap resumed>) = 0x7fd6d9800000 [pid 6093] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6092] <... openat resumed>) = 4 [pid 6090] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./51/binderfs") = 0 [pid 5832] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6092] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6090] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6092] <... creat resumed>) = 5 [pid 6090] <... creat resumed>) = 5 [pid 6090] sync( [pid 6093] <... ioctl resumed>) = 0 [pid 6092] sync( [pid 6093] close(3 [pid 6094] <... write resumed>) = 524288 [pid 6093] <... close resumed>) = 0 [pid 6093] close(4) = 0 [pid 6093] mkdir("./file1", 0777 [pid 5832] <... umount2 resumed>) = 0 [pid 6094] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6093] <... mkdir resumed>) = 0 [pid 6093] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./51/file1", [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6094] <... openat resumed>) = 4 [pid 5832] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./51/file1") = 0 [pid 6093] <... mount resumed>) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./51" [pid 6093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./52", 0777 [pid 6093] <... openat resumed>) = 3 [pid 6093] chdir("./file1") = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6095 attached [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6092] <... sync resumed>) = 0 [pid 6094] <... ioctl resumed>) = 0 [pid 6094] close(3 [pid 6095] set_robust_list(0x555557df1660, 24 [pid 6094] <... close resumed>) = 0 [pid 6094] close(4 [pid 6095] <... set_robust_list resumed>) = 0 [pid 6095] chdir("./52" [pid 6094] <... close resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6095 [pid 6094] mkdir("./file1", 0777 [pid 6095] <... chdir resumed>) = 0 [pid 6094] <... mkdir resumed>) = 0 [pid 6090] <... sync resumed>) = 0 [pid 6095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6095] setpgid(0, 0) = 0 [pid 6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6094] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6095] <... openat resumed>) = 3 [pid 6093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6090] exit_group(0 [pid 6092] exit_group(0 [pid 6090] <... exit_group resumed>) = ? [pid 6095] write(3, "1000", 4 [pid 6093] chdir("./file0" [pid 6092] <... exit_group resumed>) = ? [pid 6090] +++ exited with 0 +++ [pid 6095] <... write resumed>) = 4 [pid 6095] close(3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6095] <... close resumed>) = 0 [pid 5829] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6095] symlink("/dev/binderfs", "./binderfs" [pid 6092] +++ exited with 0 +++ [pid 5829] <... openat resumed>) = 3 executing program [pid 6095] <... symlink resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 6095] write(1, "executing program\n", 18 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6092, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6095] <... write resumed>) = 18 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [ 77.162892][ T6093] loop1: detected capacity change from 0 to 1024 [ 77.197806][ T6094] loop4: detected capacity change from 0 to 1024 [pid 5829] getdents64(3, [pid 6095] memfd_create("syzkaller", 0 [pid 6093] <... chdir resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6095] <... memfd_create resumed>) = 3 [pid 5829] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6095] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6093] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] <... mount resumed>) = 0 [pid 6093] <... openat resumed>) = 4 [pid 5831] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./50/binderfs", [pid 6093] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6094] <... openat resumed>) = 3 [pid 5829] unlink("./50/binderfs" [pid 6094] chdir("./file1" [pid 5831] unlink("./50/binderfs" [pid 5829] <... unlink resumed>) = 0 [pid 6094] <... chdir resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6094] chdir("./file0" [pid 6093] <... creat resumed>) = 5 [pid 5829] <... umount2 resumed>) = 0 [pid 6094] <... chdir resumed>) = 0 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = 0 [pid 6094] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6094] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6093] sync( [pid 5831] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] <... creat resumed>) = 5 [pid 5831] newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] sync( [pid 5831] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 5831] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5829] rmdir("./50/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6095] <... write resumed>) = 524288 [pid 6093] <... sync resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... rmdir resumed>) = 0 [pid 6093] exit_group(0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 6093] <... exit_group resumed>) = ? [pid 5829] <... close resumed>) = 0 [pid 6094] <... sync resumed>) = 0 [pid 6093] +++ exited with 0 +++ [pid 6094] exit_group(0 [pid 5829] rmdir("./50" [pid 6095] munmap(0x7fd6d9800000, 138412032 [pid 6094] <... exit_group resumed>) = ? [pid 5831] getdents64(4, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] <... rmdir resumed>) = 0 [pid 6095] <... munmap resumed>) = 0 [pid 6094] +++ exited with 0 +++ [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] close(4) = 0 [pid 5829] mkdir("./51", 0777 [pid 5830] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] rmdir("./50/file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... mkdir resumed>) = 0 [pid 6095] <... openat resumed>) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] getdents64(3, [pid 5829] <... ioctl resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 5831] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5831] rmdir("./50" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] unlink("./50/binderfs") = 0 [pid 5833] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... openat resumed>) = 3 [pid 5831] mkdir("./51", 0777 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./50/binderfs", ./strace-static-x86_64: Process 6096 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6096 [pid 5833] unlink("./50/binderfs" [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6096] set_robust_list(0x555557df1660, 24 [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5833] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(3 [pid 6095] <... ioctl resumed>) = 0 [pid 6095] close(3) = 0 [pid 6095] close(4 [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5830] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6095] <... close resumed>) = 0 [pid 6095] mkdir("./file1", 0777) = 0 [pid 6095] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6097 attached [pid 5830] newfstatat(AT_FDCWD, "./50/file1", [pid 6096] <... set_robust_list resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6097 [pid 6096] chdir("./51" [pid 6095] <... mount resumed>) = 0 [pid 5830] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6095] <... openat resumed>) = 3 [pid 6097] set_robust_list(0x555557df1660, 24 [pid 6095] chdir("./file1" [pid 6097] <... set_robust_list resumed>) = 0 [pid 6095] <... chdir resumed>) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6097] chdir("./51" [pid 6095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6097] <... chdir resumed>) = 0 [ 77.309621][ T6095] loop3: detected capacity change from 0 to 1024 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6096] <... chdir resumed>) = 0 [pid 6095] chdir("./file0" [pid 5833] <... umount2 resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... openat resumed>) = 4 [pid 6096] <... prctl resumed>) = 0 [pid 6097] <... prctl resumed>) = 0 [pid 6096] setpgid(0, 0 [pid 5830] newfstatat(4, "", [pid 6096] <... setpgid resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6097] setpgid(0, 0 [pid 6095] <... chdir resumed>) = 0 [pid 5833] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] <... setpgid resumed>) = 0 [pid 6095] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] newfstatat(AT_FDCWD, "./50/file1", [pid 6095] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6097] <... openat resumed>) = 3 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./50/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 6097] write(3, "1000", 4 [pid 6096] <... openat resumed>) = 3 [pid 6095] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6097] <... write resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(4, [pid 6097] close(3 [pid 5833] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6096] write(3, "1000", 4 [pid 5830] close(4 [pid 6096] <... write resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 6096] close(3 [pid 5830] rmdir("./50/file1" [pid 6096] <... close resumed>) = 0 [pid 6097] <... close resumed>) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs" [pid 5833] newfstatat(4, "", [pid 5830] <... rmdir resumed>) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs" [pid 6096] <... symlink resumed>) = 0 [pid 6095] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program executing program [pid 5830] getdents64(3, [pid 6097] <... symlink resumed>) = 0 [pid 6096] write(1, "executing program\n", 18 [pid 5833] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6097] write(1, "executing program\n", 18 [pid 6095] sync( [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6097] <... write resumed>) = 18 [pid 6097] memfd_create("syzkaller", 0) = 3 [pid 5833] getdents64(4, [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6097] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] close(4 [pid 6096] <... write resumed>) = 18 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./50/file1" [pid 6096] memfd_create("syzkaller", 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 6096] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] rmdir("./50" [pid 6096] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] rmdir("./50") = 0 [pid 5833] mkdir("./51", 0777 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... mkdir resumed>) = 0 [pid 6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6096] <... write resumed>) = 524288 [pid 6095] <... sync resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] mkdir("./51", 0777 [pid 6097] <... write resumed>) = 524288 [pid 6096] munmap(0x7fd6d9800000, 138412032 [pid 6095] exit_group(0 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6096] <... munmap resumed>) = 0 [pid 6095] <... exit_group resumed>) = ? [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... ioctl resumed>) = 0 [pid 6095] +++ exited with 0 +++ [pid 5833] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5833] close(3 [pid 5830] <... close resumed>) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6095, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6096] <... openat resumed>) = 4 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6098 attached [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6098 [pid 6096] ioctl(4, LOOP_SET_FD, 3 [pid 6098] set_robust_list(0x555557df1660, 24 [pid 6096] <... ioctl resumed>) = 0 [pid 5832] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6098] <... set_robust_list resumed>) = 0 [pid 6097] <... munmap resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6098] chdir("./51" [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6098] <... chdir resumed>) = 0 [pid 6097] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6098] setpgid(0, 0 [pid 6097] ioctl(4, LOOP_SET_FD, 3 [pid 5832] newfstatat(AT_FDCWD, "./52/binderfs", [pid 6098] <... setpgid resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./52/binderfs") = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6098] write(3, "1000", 4) = 4 [pid 5832] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6098] close(3) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6099 [pid 6098] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6099 attached ) = 0 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] mkdir("./file1", 0777) = 0 [pid 6096] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6097] <... ioctl resumed>) = 0 [pid 6099] set_robust_list(0x555557df1660, 24 [pid 6098] write(1, "executing program\n", 18 [pid 5832] <... umount2 resumed>) = 0 executing program [pid 6099] <... set_robust_list resumed>) = 0 [pid 6098] <... write resumed>) = 18 [pid 5832] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6097] close(3 [pid 5832] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6097] close(4 [pid 5832] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6097] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 6097] mkdir("./file1", 0777 [pid 5832] newfstatat(4, "", [pid 6098] memfd_create("syzkaller", 0 [pid 6099] chdir("./51" [pid 6098] <... memfd_create resumed>) = 3 [pid 6097] <... mkdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6097] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(4, [pid 6099] <... chdir resumed>) = 0 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6098] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] getdents64(4, [pid 6097] <... mount resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6099] <... prctl resumed>) = 0 [pid 6099] setpgid(0, 0 [pid 6097] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] close(4 [pid 6099] <... setpgid resumed>) = 0 [pid 6097] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 6097] chdir("./file1" [pid 5832] rmdir("./52/file1" [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6097] <... chdir resumed>) = 0 [pid 6096] <... mount resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6099] <... openat resumed>) = 3 [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] getdents64(3, [pid 6099] write(3, "1000", 4 [pid 6097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6096] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 77.445084][ T6096] loop0: detected capacity change from 0 to 1024 [ 77.457779][ T6097] loop2: detected capacity change from 0 to 1024 [pid 6097] chdir("./file0" [pid 6096] chdir("./file1" [pid 5832] close(3 [pid 6099] <... write resumed>) = 4 [pid 6099] close(3 [pid 6096] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6099] <... close resumed>) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] rmdir("./52" [pid 6099] symlink("/dev/binderfs", "./binderfs" [pid 6096] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... rmdir resumed>) = 0 [pid 6096] chdir("./file0" [pid 6099] <... symlink resumed>) = 0 [pid 5832] mkdir("./53", 0777 executing program [pid 6099] write(1, "executing program\n", 18 [pid 6097] <... chdir resumed>) = 0 [pid 6096] <... chdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6099] <... write resumed>) = 18 [pid 6099] memfd_create("syzkaller", 0 [pid 6097] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6099] <... memfd_create resumed>) = 3 [pid 6096] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6098] <... write resumed>) = 524288 [pid 6097] <... openat resumed>) = 4 [pid 6096] <... openat resumed>) = 4 [pid 6097] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6096] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6099] <... mmap resumed>) = 0x7fd6d9800000 [pid 6098] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 6098] <... munmap resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6098] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6097] <... creat resumed>) = 5 [pid 6096] <... creat resumed>) = 5 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6100 [pid 6098] ioctl(4, LOOP_SET_FD, 3 [pid 6097] sync( [pid 6096] sync(./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x555557df1660, 24) = 0 [pid 6100] chdir("./53") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6100] write(1, "executing program\n", 18 [pid 6099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6100] <... write resumed>) = 18 [pid 6100] memfd_create("syzkaller", 0) = 3 [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6099] <... write resumed>) = 524288 [pid 6098] <... ioctl resumed>) = 0 [pid 6096] <... sync resumed>) = 0 [pid 6096] exit_group(0) = ? [pid 6098] close(3 [pid 6096] +++ exited with 0 +++ [pid 6097] <... sync resumed>) = 0 [pid 6098] <... close resumed>) = 0 [pid 6097] exit_group(0 [pid 6098] close(4 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6096, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6097] <... exit_group resumed>) = ? [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6097] +++ exited with 0 +++ [pid 5829] <... restart_syscall resumed>) = 0 [pid 5829] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 6098] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6099] munmap(0x7fd6d9800000, 138412032 [pid 6098] mkdir("./file1", 0777 [pid 5829] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6100] <... write resumed>) = 524288 [pid 6099] <... munmap resumed>) = 0 [pid 6098] <... mkdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 77.537730][ T6098] loop1: detected capacity change from 0 to 1024 [pid 5829] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6098] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] unlink("./51/binderfs" [pid 6100] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... unlink resumed>) = 0 [pid 6100] <... munmap resumed>) = 0 [pid 6099] <... openat resumed>) = 4 [pid 5829] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6099] ioctl(4, LOOP_SET_FD, 3 [pid 6098] <... mount resumed>) = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6100] ioctl(4, LOOP_SET_FD, 3 [pid 6099] <... ioctl resumed>) = 0 [pid 6098] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6099] close(3 [pid 6098] <... openat resumed>) = 3 [pid 6098] chdir("./file1" [pid 5831] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6099] <... close resumed>) = 0 [pid 6098] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6099] close(4 [pid 6098] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6099] <... close resumed>) = 0 [pid 6098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 3 [pid 6099] mkdir("./file1", 0777 [pid 5831] newfstatat(3, "", [pid 6098] chdir("./file0" [pid 6099] <... mkdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6099] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6098] <... chdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] <... umount2 resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./51/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6098] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] unlink("./51/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5831] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 6098] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./51/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./51") = 0 [pid 5829] mkdir("./52", 0777) = 0 [pid 6100] <... ioctl resumed>) = 0 [pid 6099] <... mount resumed>) = 0 [pid 6098] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... umount2 resumed>) = 0 [pid 6099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6100] close(3 [pid 6099] chdir("./file1") = 0 [pid 5831] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6099] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] <... close resumed>) = 0 [pid 6099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] newfstatat(AT_FDCWD, "./51/file1", [pid 5829] <... openat resumed>) = 3 [pid 6099] chdir("./file0" [pid 6100] close(4 [pid 6098] <... creat resumed>) = 5 [ 77.604944][ T6099] loop4: detected capacity change from 0 to 1024 [ 77.606845][ T6100] loop3: detected capacity change from 0 to 1024 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6100] <... close resumed>) = 0 [pid 6099] <... chdir resumed>) = 0 [pid 6098] sync( [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6100] mkdir("./file1", 0777 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6101 attached [pid 6100] <... mkdir resumed>) = 0 [pid 6099] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6101] set_robust_list(0x555557df1660, 24) = 0 [pid 6100] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6099] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 6101] chdir("./52" [pid 6099] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] newfstatat(4, "", [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6101 [pid 6101] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] getdents64(4, [pid 6101] <... prctl resumed>) = 0 [pid 6101] setpgid(0, 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 6101] <... setpgid resumed>) = 0 [pid 6099] <... creat resumed>) = 5 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6099] sync( [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6100] <... mount resumed>) = 0 [pid 5831] close(4 [pid 6098] <... sync resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6101] <... openat resumed>) = 3 [pid 6100] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6098] exit_group(0 [pid 5831] rmdir("./51/file1" [pid 6098] <... exit_group resumed>) = ? [pid 6100] <... openat resumed>) = 3 [pid 6100] chdir("./file1" [pid 5831] <... rmdir resumed>) = 0 [pid 6100] <... chdir resumed>) = 0 [pid 6101] write(3, "1000", 4 [pid 6100] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6101] <... write resumed>) = 4 [pid 6100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6101] close(3) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs" [pid 6100] chdir("./file0" [pid 6101] <... symlink resumed>) = 0 [pid 6098] +++ exited with 0 +++ [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- executing program [pid 5831] close(3 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./51") = 0 [pid 6101] write(1, "executing program\n", 18) = 18 [pid 6101] memfd_create("syzkaller", 0 [pid 6099] <... sync resumed>) = 0 [pid 5831] mkdir("./52", 0777 [pid 6100] <... chdir resumed>) = 0 [pid 6099] exit_group(0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6099] <... exit_group resumed>) = ? [pid 6101] <... memfd_create resumed>) = 3 [pid 6100] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6100] <... openat resumed>) = 4 [pid 6099] +++ exited with 0 +++ [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6099, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 6100] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 6101] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... openat resumed>) = 3 [pid 5830] getdents64(3, [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] close(3 [pid 5833] newfstatat(3, "", [pid 5830] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 5830] newfstatat(AT_FDCWD, "./51/binderfs", [pid 6100] <... creat resumed>) = 5 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] unlink("./51/binderfs" [pid 5833] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6102 attached [pid 6100] sync( [pid 5833] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5830] <... umount2 resumed>) = 0 [pid 6102] set_robust_list(0x555557df1660, 24 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6102 [pid 6102] <... set_robust_list resumed>) = 0 [pid 6102] chdir("./52") = 0 [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] unlink("./51/binderfs" [pid 5830] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6102] <... prctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./51/file1", [pid 6102] setpgid(0, 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6102] <... setpgid resumed>) = 0 [pid 5830] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6102] <... openat resumed>) = 3 [pid 5833] <... unlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6102] write(3, "1000", 4) = 4 [pid 6101] <... write resumed>) = 524288 [pid 5830] <... openat resumed>) = 4 [pid 5833] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6102] close(3 [pid 5830] getdents64(4, [pid 6102] <... close resumed>) = 0 [pid 6102] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./51/file1" [pid 6102] <... symlink resumed>) = 0 [pid 6100] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 executing program [pid 6102] write(1, "executing program\n", 18 [pid 6100] exit_group(0 [pid 5833] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 6102] <... write resumed>) = 18 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6100] <... exit_group resumed>) = ? [pid 6102] memfd_create("syzkaller", 0 [pid 6100] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./51/file1", [pid 5830] close(3 [pid 6102] <... memfd_create resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... close resumed>) = 0 [pid 6102] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] rmdir("./51" [pid 6101] munmap(0x7fd6d9800000, 138412032 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6101] <... munmap resumed>) = 0 [pid 5832] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] umount2("./51/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5830] mkdir("./52", 0777 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6101] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./53/binderfs", [pid 6101] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./53/binderfs" [pid 5830] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... unlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... openat resumed>) = 4 [pid 5832] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] close(3 [pid 5832] <... umount2 resumed>) = 0 [pid 6102] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6102] munmap(0x7fd6d9800000, 138412032 [pid 6101] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6101] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6101] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./53/file1", [pid 6102] <... munmap resumed>) = 0 [pid 6101] close(4 [pid 5833] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6101] <... close resumed>) = 0 [pid 5832] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6103 attached [pid 6101] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] set_robust_list(0x555557df1660, 24 [pid 6102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6101] <... mkdir resumed>) = 0 [pid 5833] rmdir("./51/file1" [pid 5832] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6102] <... openat resumed>) = 4 [ 77.790227][ T6101] loop0: detected capacity change from 0 to 1024 [pid 6102] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6101] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(3, [pid 6103] <... set_robust_list resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./53/file1") = 0 [pid 5832] getdents64(3, [pid 5833] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 6103] chdir("./52" [pid 5833] <... close resumed>) = 0 [pid 6103] <... chdir resumed>) = 0 [pid 5833] rmdir("./51" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6103 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./53") = 0 [pid 5832] mkdir("./54", 0777 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6103] <... prctl resumed>) = 0 [pid 5833] mkdir("./52", 0777 [pid 6103] setpgid(0, 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6103] <... setpgid resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6102] <... ioctl resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6102] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 6102] <... close resumed>) = 0 [pid 5833] close(3 [pid 6102] close(4) = 0 [pid 6103] <... openat resumed>) = 3 [pid 6102] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 6103] write(3, "1000", 4) = 4 [pid 6102] <... mkdir resumed>) = 0 [pid 6103] close(3) = 0 [pid 5832] <... close resumed>) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6104 attached [pid 6103] <... symlink resumed>) = 0 [pid 6104] set_robust_list(0x555557df1660, 24 [pid 6101] <... mount resumed>) = 0 [pid 6104] <... set_robust_list resumed>) = 0 [pid 6104] chdir("./54" [pid 6101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORYexecuting program [pid 6104] <... chdir resumed>) = 0 [pid 6103] write(1, "executing program\n", 18 [pid 6102] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6101] <... openat resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6104 [pid 6103] <... write resumed>) = 18 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6101] chdir("./file1" [pid 6104] <... prctl resumed>) = 0 [pid 6101] <... chdir resumed>) = 0 executing program [pid 6104] setpgid(0, 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6104] <... setpgid resumed>) = 0 [pid 6103] memfd_create("syzkaller", 0 [pid 6101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6101] chdir("./file0" [pid 6103] <... memfd_create resumed>) = 3 [pid 6104] <... openat resumed>) = 3 [pid 6104] write(3, "1000", 4) = 4 [pid 6104] close(3) = 0 [pid 6104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6104] write(1, "executing program\n", 18./strace-static-x86_64: Process 6105 attached ) = 18 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6101] <... chdir resumed>) = 0 [pid 6104] memfd_create("syzkaller", 0 [pid 6101] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6104] <... memfd_create resumed>) = 3 [pid 6103] <... mmap resumed>) = 0x7fd6d9800000 [pid 6105] set_robust_list(0x555557df1660, 24 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6105] <... set_robust_list resumed>) = 0 [ 77.841082][ T6102] loop2: detected capacity change from 0 to 1024 [pid 6105] chdir("./52" [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6102] <... mount resumed>) = 0 [pid 6101] <... openat resumed>) = 4 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6105 [pid 6105] <... chdir resumed>) = 0 [pid 6101] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6102] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6105] <... prctl resumed>) = 0 [pid 6102] chdir("./file1" [pid 6105] setpgid(0, 0) = 0 [pid 6102] <... chdir resumed>) = 0 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6103] <... write resumed>) = 524288 [pid 6102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6102] chdir("./file0" [pid 6105] <... openat resumed>) = 3 [pid 6105] write(3, "1000", 4 [pid 6101] <... creat resumed>) = 5 [pid 6101] sync( [pid 6105] <... write resumed>) = 4 [pid 6102] <... chdir resumed>) = 0 [pid 6105] close(3 [pid 6104] <... write resumed>) = 524288 [pid 6103] munmap(0x7fd6d9800000, 138412032executing program [pid 6102] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6105] <... close resumed>) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6105] write(1, "executing program\n", 18) = 18 [pid 6104] munmap(0x7fd6d9800000, 138412032 [pid 6105] memfd_create("syzkaller", 0 [pid 6103] <... munmap resumed>) = 0 [pid 6102] <... openat resumed>) = 4 [pid 6105] <... memfd_create resumed>) = 3 [pid 6103] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6102] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6104] <... munmap resumed>) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6101] <... sync resumed>) = 0 [pid 6101] exit_group(0 [pid 6104] ioctl(4, LOOP_SET_FD, 3 [pid 6101] <... exit_group resumed>) = ? [pid 6103] <... openat resumed>) = 4 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 6101] +++ exited with 0 +++ [pid 6104] <... ioctl resumed>) = 0 [pid 6105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6103] <... ioctl resumed>) = 0 [pid 6102] <... creat resumed>) = 5 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6102] sync( [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6103] close(3 [pid 6104] close(3 [pid 6103] <... close resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6103] close(4 [pid 6104] <... close resumed>) = 0 [pid 6103] <... close resumed>) = 0 [pid 5829] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6103] mkdir("./file1", 0777 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6104] close(4 [pid 5829] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6104] <... close resumed>) = 0 [pid 6104] mkdir("./file1", 0777 [pid 6103] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6104] <... mkdir resumed>) = 0 [pid 6104] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6103] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] newfstatat(3, "", [pid 6105] <... write resumed>) = 524288 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 6105] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6105] <... munmap resumed>) = 0 [pid 6104] <... mount resumed>) = 0 [pid 5829] unlink("./52/binderfs" [pid 6104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] <... unlink resumed>) = 0 [pid 6104] <... openat resumed>) = 3 [pid 5829] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6104] chdir("./file1") = 0 [ 77.927194][ T6104] loop3: detected capacity change from 0 to 1024 [ 77.934253][ T6103] loop1: detected capacity change from 0 to 1024 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6105] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6103] <... mount resumed>) = 0 [pid 6102] <... sync resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6104] chdir("./file0" [pid 6105] <... openat resumed>) = 4 [pid 6104] <... chdir resumed>) = 0 [pid 6103] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6102] exit_group(0 [pid 6105] ioctl(4, LOOP_SET_FD, 3 [pid 6104] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6103] <... openat resumed>) = 3 [pid 6102] <... exit_group resumed>) = ? [pid 5829] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6104] <... openat resumed>) = 4 [pid 6103] chdir("./file1" [pid 6102] +++ exited with 0 +++ [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] <... chdir resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6102, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] newfstatat(AT_FDCWD, "./52/file1", [pid 6105] <... ioctl resumed>) = 0 [pid 6104] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6103] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6105] close(3) = 0 [pid 5829] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6105] close(4) = 0 [pid 6103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6105] mkdir("./file1", 0777 [pid 6103] chdir("./file0" [pid 5829] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6105] <... mkdir resumed>) = 0 [pid 6105] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... openat resumed>) = 4 [pid 6104] <... creat resumed>) = 5 [pid 6103] <... chdir resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6104] sync( [pid 6103] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6103] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(4, [pid 5831] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(3, "", [pid 5829] close(4 [pid 6105] <... mount resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] rmdir("./52/file1" [pid 6105] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... rmdir resumed>) = 0 [pid 6105] chdir("./file1" [pid 6103] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 6105] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(AT_FDCWD, "./52/binderfs", [pid 5829] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] unlink("./52/binderfs" [pid 5829] rmdir("./52" [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] mkdir("./53", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [ 77.995718][ T6105] loop4: detected capacity change from 0 to 1024 [pid 5829] close(3 [pid 6105] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6103] <... creat resumed>) = 5 [pid 6105] chdir("./file0" [pid 6103] sync( [pid 6105] <... chdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6105] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6106 attached [pid 6105] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6104] <... sync resumed>) = 0 [pid 6106] set_robust_list(0x555557df1660, 24 [pid 5831] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6106 [pid 6106] <... set_robust_list resumed>) = 0 [pid 6104] exit_group(0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] chdir("./53" [pid 6104] <... exit_group resumed>) = ? [pid 5831] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6106] <... chdir resumed>) = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6104] +++ exited with 0 +++ [pid 5831] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6106] <... prctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] setpgid(0, 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6104, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6106] <... setpgid resumed>) = 0 [pid 6105] <... creat resumed>) = 5 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6105] sync( [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 4 [pid 6103] <... sync resumed>) = 0 [pid 6106] <... openat resumed>) = 3 [pid 6103] exit_group(0 [pid 5831] newfstatat(4, "", [pid 6103] <... exit_group resumed>) = ? [pid 6106] write(3, "1000", 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6106] <... write resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6106] close(3 [pid 6103] +++ exited with 0 +++ [pid 5831] getdents64(4, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6106] <... close resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6106] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6106] <... symlink resumed>) = 0 [pid 5831] close(4 [pid 6106] write(1, "executing program\n", 18executing program [pid 5832] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 6106] <... write resumed>) = 18 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] rmdir("./52/file1" [pid 5830] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6106] memfd_create("syzkaller", 0 [pid 6105] <... sync resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] <... memfd_create resumed>) = 3 [pid 6105] exit_group(0 [pid 5832] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6105] <... exit_group resumed>) = ? [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] newfstatat(3, "", [pid 5830] getdents64(3, [pid 6106] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6105] +++ exited with 0 +++ [pid 5830] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] getdents64(3, [pid 5831] getdents64(3, [pid 5830] newfstatat(AT_FDCWD, "./52/binderfs", [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(3 [pid 5830] unlink("./52/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5833] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./52" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5833] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6106] <... write resumed>) = 524288 [pid 5833] <... openat resumed>) = 3 [pid 5832] unlink("./54/binderfs" [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6106] munmap(0x7fd6d9800000, 138412032 [pid 5833] newfstatat(3, "", [pid 5832] <... unlink resumed>) = 0 [pid 5831] mkdir("./53", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5832] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... mkdir resumed>) = 0 [pid 6106] <... munmap resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./52/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] <... openat resumed>) = 4 [pid 5831] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./52/binderfs", [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./52/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] <... ioctl resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./54/file1", ./strace-static-x86_64: Process 6107 attached [pid 5830] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6107] set_robust_list(0x555557df1660, 24 [pid 5830] newfstatat(4, "", [pid 6107] <... set_robust_list resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6107] chdir("./53" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(4, [pid 5833] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6107] <... chdir resumed>) = 0 [pid 5830] getdents64(4, [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6107] <... prctl resumed>) = 0 [pid 5830] close(4 [pid 6107] setpgid(0, 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6107 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 6107] <... setpgid resumed>) = 0 [pid 5830] rmdir("./52/file1" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5830] <... rmdir resumed>) = 0 [pid 5833] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(4 [pid 5830] getdents64(3, [pid 6107] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./52/file1", [pid 5832] <... close resumed>) = 0 [pid 6107] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6107] <... write resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] rmdir("./54/file1" [pid 5830] close(3 [pid 6107] close(3 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6107] <... close resumed>) = 0 [pid 5833] umount2("./52/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] rmdir("./52" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(3, [pid 5833] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6107] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... openat resumed>) = 4 [pid 5832] close(3 [pid 5830] mkdir("./53", 0777 [pid 6107] <... symlink resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] <... close resumed>) = 0 executing program [pid 6107] write(1, "executing program\n", 18 [pid 6106] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] rmdir("./54" [pid 5830] <... mkdir resumed>) = 0 [pid 6107] <... write resumed>) = 18 [pid 6106] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... rmdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6107] memfd_create("syzkaller", 0 [pid 6106] close(4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] mkdir("./55", 0777 [pid 6107] <... memfd_create resumed>) = 3 [pid 6106] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5830] <... openat resumed>) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6106] mkdir("./file1", 0777 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6107] <... mmap resumed>) = 0x7fd6d9800000 [pid 6106] <... mkdir resumed>) = 0 [pid 5833] close(4 [pid 5830] <... ioctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6106] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] rmdir("./52/file1" [pid 5832] <... openat resumed>) = 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] getdents64(3, [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] close(3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5832] close(3 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./52") = 0 [pid 5833] mkdir("./53", 0777 [pid 5832] <... close resumed>) = 0 [pid 6107] <... write resumed>) = 524288 [pid 6106] <... mount resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6106] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6106] chdir("./file1" [pid 5833] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6108 attached [pid 6106] <... chdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6108 [ 78.123952][ T6106] loop0: detected capacity change from 0 to 1024 [pid 6108] set_robust_list(0x555557df1660, 24 [pid 6107] munmap(0x7fd6d9800000, 138412032 [pid 6106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6109 attached [pid 6108] <... set_robust_list resumed>) = 0 [pid 6107] <... munmap resumed>) = 0 [pid 6106] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 6109] set_robust_list(0x555557df1660, 24) = 0 [pid 6108] chdir("./53" [pid 6107] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6109] chdir("./55" [pid 6108] <... chdir resumed>) = 0 [pid 6107] <... openat resumed>) = 4 [pid 6106] <... chdir resumed>) = 0 [pid 6109] <... chdir resumed>) = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6107] ioctl(4, LOOP_SET_FD, 3 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6108] <... prctl resumed>) = 0 [pid 6108] setpgid(0, 0 [pid 6106] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6109] <... prctl resumed>) = 0 [pid 6108] <... setpgid resumed>) = 0 [pid 6107] <... ioctl resumed>) = 0 [pid 6106] <... openat resumed>) = 4 [pid 6109] setpgid(0, 0) = 0 [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6109 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6108] <... openat resumed>) = 3 [pid 6106] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6110 attached [pid 6109] <... openat resumed>) = 3 [pid 6108] write(3, "1000", 4 [pid 6107] close(3 [pid 6109] write(3, "1000", 4 [pid 6108] <... write resumed>) = 4 [pid 6109] <... write resumed>) = 4 [pid 6108] close(3 [pid 6109] close(3 [pid 6107] <... close resumed>) = 0 [pid 6109] <... close resumed>) = 0 [pid 6108] <... close resumed>) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs" [pid 6107] close(4 [pid 6108] symlink("/dev/binderfs", "./binderfs" [pid 6109] <... symlink resumed>) = 0 [pid 6108] <... symlink resumed>) = 0 [pid 6107] <... close resumed>) = 0 [pid 6106] <... creat resumed>) = 5 executing program [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6110 [pid 6110] set_robust_list(0x555557df1660, 24 [pid 6109] write(1, "executing program\n", 18 [pid 6108] write(1, "executing program\n", 18 [pid 6107] mkdir("./file1", 0777 [pid 6106] sync(executing program [pid 6110] <... set_robust_list resumed>) = 0 [pid 6109] <... write resumed>) = 18 [pid 6108] <... write resumed>) = 18 [pid 6107] <... mkdir resumed>) = 0 [pid 6110] chdir("./53" [pid 6107] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6108] memfd_create("syzkaller", 0 [pid 6110] <... chdir resumed>) = 0 [pid 6109] memfd_create("syzkaller", 0 [pid 6110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6109] <... memfd_create resumed>) = 3 [pid 6108] <... memfd_create resumed>) = 3 [pid 6110] <... prctl resumed>) = 0 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6110] setpgid(0, 0 [pid 6109] <... mmap resumed>) = 0x7fd6d9800000 [pid 6108] <... mmap resumed>) = 0x7fd6d9800000 [pid 6110] <... setpgid resumed>) = 0 [pid 6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6110] <... openat resumed>) = 3 [pid 6110] write(3, "1000", 4) = 4 [pid 6110] close(3) = 0 [ 78.195650][ T6107] loop2: detected capacity change from 0 to 1024 [ 78.196893][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 78.196908][ T29] audit: type=1800 audit(1730647677.837:269): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 6110] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6110] write(1, "executing program\n", 18) = 18 [pid 6107] <... mount resumed>) = 0 [pid 6110] memfd_create("syzkaller", 0 [pid 6107] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6110] <... memfd_create resumed>) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6107] <... openat resumed>) = 3 [pid 6106] <... sync resumed>) = 0 [pid 6110] <... mmap resumed>) = 0x7fd6d9800000 [pid 6107] chdir("./file1" [pid 6106] exit_group(0) = ? [pid 6106] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6106, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6107] <... chdir resumed>) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6108] <... write resumed>) = 524288 [pid 6107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6109] <... write resumed>) = 524288 [pid 6110] <... write resumed>) = 524288 [pid 6109] munmap(0x7fd6d9800000, 138412032 [pid 6108] munmap(0x7fd6d9800000, 138412032 [pid 6107] chdir("./file0" [pid 5829] <... restart_syscall resumed>) = 0 [pid 6110] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6107] <... chdir resumed>) = 0 [pid 6107] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6110] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6110] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 3 [pid 6110] ioctl(4, LOOP_SET_FD, 3 [pid 6109] <... munmap resumed>) = 0 [pid 6108] <... munmap resumed>) = 0 [pid 6107] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./53/binderfs") = 0 [pid 5829] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6109] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6110] <... ioctl resumed>) = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6107] <... creat resumed>) = 5 [pid 5829] <... umount2 resumed>) = 0 [pid 6110] close(3 [pid 6109] ioctl(4, LOOP_SET_FD, 3 [pid 6108] <... openat resumed>) = 4 [pid 6107] sync( [pid 5829] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6110] <... close resumed>) = 0 [pid 6109] <... ioctl resumed>) = 0 [pid 6108] ioctl(4, LOOP_SET_FD, 3 [pid 6107] <... sync resumed>) = 0 [pid 6110] close(4 [pid 6109] close(3 [pid 5829] getdents64(4, [pid 6110] <... close resumed>) = 0 [ 78.307785][ T29] audit: type=1800 audit(1730647677.947:270): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 78.309804][ T6110] loop4: detected capacity change from 0 to 1024 [ 78.343403][ T6109] loop3: detected capacity change from 0 to 1024 [pid 6109] <... close resumed>) = 0 [pid 6110] mkdir("./file1", 0777) = 0 [pid 6109] close(4) = 0 [pid 6109] mkdir("./file1", 0777 [pid 6110] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6109] <... mkdir resumed>) = 0 [pid 6109] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6110] <... mount resumed>) = 0 [pid 6108] <... ioctl resumed>) = 0 [pid 6107] exit_group(0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 6110] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6108] close(3 [pid 6107] <... exit_group resumed>) = ? [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6110] <... openat resumed>) = 3 [pid 6108] <... close resumed>) = 0 [pid 6107] +++ exited with 0 +++ [pid 5829] close(4 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] <... close resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] rmdir("./53/file1" [pid 6110] chdir("./file1" [pid 6108] close(4 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6110] <... chdir resumed>) = 0 [pid 6109] <... mount resumed>) = 0 [pid 6108] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 6110] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6109] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6108] mkdir("./file1", 0777 [pid 6110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6109] <... openat resumed>) = 3 [pid 6108] <... mkdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6110] chdir("./file0" [pid 6109] chdir("./file1" [pid 5831] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(3 [pid 6110] <... chdir resumed>) = 0 [pid 6109] <... chdir resumed>) = 0 [pid 6108] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6110] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 6110] <... openat resumed>) = 4 [pid 6109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 78.357263][ T6108] loop1: detected capacity change from 0 to 1024 [pid 5831] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./53" [pid 6109] chdir("./file0" [pid 5831] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 6110] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] newfstatat(3, "", [pid 5829] mkdir("./54", 0777 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... openat resumed>) = 3 [pid 5831] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... ioctl resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5829] close(3 [pid 6110] <... creat resumed>) = 5 [pid 6109] <... chdir resumed>) = 0 [pid 6108] <... mount resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6110] sync( [ 78.402433][ T29] audit: type=1800 audit(1730647678.037:271): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 6109] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] unlink("./53/binderfs" [pid 6109] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 6109] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... unlink resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6108] <... openat resumed>) = 3 [pid 6108] chdir("./file1") = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6108] chdir("./file0" [pid 6109] <... creat resumed>) = 5 [pid 6108] <... chdir resumed>) = 0 [pid 6109] sync( [pid 6108] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000./strace-static-x86_64: Process 6111 attached ) = 4 [pid 5831] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6111 [pid 6111] set_robust_list(0x555557df1660, 24) = 0 [pid 6111] chdir("./54") = 0 [pid 6108] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6111] setpgid(0, 0) = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6108] <... creat resumed>) = 5 [pid 6108] sync( [pid 6111] write(3, "1000", 4 [pid 5831] <... umount2 resumed>) = 0 [pid 6111] <... write resumed>) = 4 [pid 5831] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6111] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./53/file1", [pid 6111] <... close resumed>) = 0 [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 78.435350][ T29] audit: type=1800 audit(1730647678.077:272): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 6110] <... sync resumed>) = 0 [pid 6110] exit_group(0) = ? [pid 6110] +++ exited with 0 +++ [pid 6111] <... symlink resumed>) = 0 [pid 5831] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6111] write(1, "executing program\n", 18executing program [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6110, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6111] <... write resumed>) = 18 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6108] <... sync resumed>) = 0 [pid 6108] exit_group(0 [pid 6109] <... sync resumed>) = 0 [pid 6108] <... exit_group resumed>) = ? [pid 6109] exit_group(0 [pid 6108] +++ exited with 0 +++ [pid 6109] <... exit_group resumed>) = ? [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6111] memfd_create("syzkaller", 0 [pid 6109] +++ exited with 0 +++ [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6108, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... openat resumed>) = 4 [pid 6111] <... memfd_create resumed>) = 3 [pid 5833] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(4, "", [pid 5830] <... restart_syscall resumed>) = 0 [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6111] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(3, "", [pid 5832] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] close(4 [pid 5833] getdents64(3, [pid 5832] newfstatat(3, "", [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] newfstatat(3, "", [pid 5833] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5830] getdents64(3, [pid 5832] getdents64(3, [pid 5831] rmdir("./53/file1" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 78.490299][ T29] audit: type=1800 audit(1730647678.107:273): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5830] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5833] unlink("./53/binderfs" [pid 5832] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5831] rmdir("./53" [pid 5830] unlink("./53/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5831] mkdir("./54", 0777 [pid 6111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5830] <... unlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] unlink("./55/binderfs") = 0 [pid 6111] <... write resumed>) = 524288 [pid 6111] munmap(0x7fd6d9800000, 138412032 [pid 5832] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... umount2 resumed>) = 0 [pid 6111] <... munmap resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 5833] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 6111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./53/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./55/file1", [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(AT_FDCWD, "./53/file1", [pid 5833] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./53/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6112 attached ) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6112 [pid 5830] newfstatat(4, "", [pid 5833] newfstatat(4, "", [pid 5832] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5830] getdents64(4, [pid 5833] getdents64(4, [pid 5832] newfstatat(4, "", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 6112] set_robust_list(0x555557df1660, 24 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] close(4 [pid 6112] <... set_robust_list resumed>) = 0 [pid 5833] close(4 [pid 5832] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 6112] chdir("./54" [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./53/file1" [pid 6112] <... chdir resumed>) = 0 [pid 5833] rmdir("./53/file1" [pid 5832] close(4 [pid 5830] <... rmdir resumed>) = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6112] <... prctl resumed>) = 0 [pid 5832] rmdir("./55/file1" [pid 6112] setpgid(0, 0 [pid 5833] getdents64(3, [pid 5832] <... rmdir resumed>) = 0 [pid 6112] <... setpgid resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(3, [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6112] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5832] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6112] write(3, "1000", 4 [pid 5833] rmdir("./53" [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 6112] <... write resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] rmdir("./55" [pid 5830] <... close resumed>) = 0 [pid 6111] <... ioctl resumed>) = 0 [pid 5833] mkdir("./54", 0777 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] rmdir("./53" [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6111] close(3) = 0 [pid 5832] mkdir("./56", 0777 [pid 6111] close(4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... mkdir resumed>) = 0 [pid 5830] mkdir("./54", 0777 [pid 6112] close(3 [pid 6111] <... close resumed>) = 0 [pid 6112] <... close resumed>) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs" [pid 6111] mkdir("./file1", 0777 [pid 5833] <... openat resumed>) = 3 [pid 6112] <... symlink resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... mkdir resumed>) = 0 [pid 6112] write(1, "executing program\n", 18) = 18 [pid 6112] memfd_create("syzkaller", 0executing program [pid 6111] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6112] <... memfd_create resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6112] <... mmap resumed>) = 0x7fd6d9800000 [pid 6111] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5832] close(3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... close resumed>) = 0 [pid 6112] <... write resumed>) = 524288 [pid 6111] <... mount resumed>) = 0 [ 78.578937][ T6111] loop0: detected capacity change from 0 to 1024 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... close resumed>) = 0 ./strace-static-x86_64: Process 6113 attached [pid 6111] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] set_robust_list(0x555557df1660, 24) = 0 [pid 6112] munmap(0x7fd6d9800000, 138412032 [pid 6111] chdir("./file1" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6113] chdir("./54" [pid 6112] <... munmap resumed>) = 0 [pid 6111] <... chdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6113 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6114 attached [pid 6113] <... chdir resumed>) = 0 [pid 6111] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6114] set_robust_list(0x555557df1660, 24 [pid 6112] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6111] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6115 attached [pid 6112] <... openat resumed>) = 4 [pid 6111] chdir("./file0" [pid 6114] <... set_robust_list resumed>) = 0 [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 6115] set_robust_list(0x555557df1660, 24 [pid 6114] chdir("./56" [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6111] <... chdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6114 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6115 [pid 6115] <... set_robust_list resumed>) = 0 [pid 6114] <... chdir resumed>) = 0 [pid 6113] <... prctl resumed>) = 0 [pid 6111] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6115] chdir("./54" [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6113] setpgid(0, 0 [pid 6111] <... openat resumed>) = 4 [pid 6115] <... chdir resumed>) = 0 [pid 6114] <... prctl resumed>) = 0 [pid 6113] <... setpgid resumed>) = 0 [pid 6111] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6111] sync( [pid 6112] <... ioctl resumed>) = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6114] setpgid(0, 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6115] <... prctl resumed>) = 0 [pid 6114] <... setpgid resumed>) = 0 [pid 6113] <... openat resumed>) = 3 [pid 6112] close(3 [pid 6115] setpgid(0, 0 [pid 6113] write(3, "1000", 4 [pid 6112] <... close resumed>) = 0 [pid 6115] <... setpgid resumed>) = 0 [pid 6113] <... write resumed>) = 4 [pid 6112] close(4 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] close(3 [pid 6112] <... close resumed>) = 0 [pid 6113] <... close resumed>) = 0 [pid 6112] mkdir("./file1", 0777 [pid 6113] symlink("/dev/binderfs", "./binderfs"executing program [pid 6112] <... mkdir resumed>) = 0 [pid 6111] <... sync resumed>) = 0 [pid 6115] <... openat resumed>) = 3 [pid 6113] <... symlink resumed>) = 0 [pid 6113] write(1, "executing program\n", 18 [pid 6111] exit_group(0 [pid 6113] <... write resumed>) = 18 [pid 6115] write(3, "1000", 4 [pid 6113] memfd_create("syzkaller", 0 [pid 6112] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6115] <... write resumed>) = 4 [pid 6114] <... openat resumed>) = 3 [pid 6111] <... exit_group resumed>) = ? [pid 6115] close(3 [pid 6114] write(3, "1000", 4 [pid 6113] <... memfd_create resumed>) = 3 [pid 6111] +++ exited with 0 +++ [pid 6115] <... close resumed>) = 0 [pid 6114] <... write resumed>) = 4 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6112] <... mount resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6115] symlink("/dev/binderfs", "./binderfs" [pid 6114] close(3 [pid 6113] <... mmap resumed>) = 0x7fd6d9800000 [pid 6112] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6115] <... symlink resumed>) = 0 [pid 6114] <... close resumed>) = 0 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6112] <... openat resumed>) = 3 [pid 6112] chdir("./file1"executing program executing program [pid 6115] write(1, "executing program\n", 18 [pid 6112] <... chdir resumed>) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs" [pid 6115] <... write resumed>) = 18 [pid 6112] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6115] memfd_create("syzkaller", 0 [pid 6112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] <... symlink resumed>) = 0 [pid 6115] <... memfd_create resumed>) = 3 [pid 6114] write(1, "executing program\n", 18 [pid 6112] chdir("./file0" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6114] <... write resumed>) = 18 [pid 6112] <... chdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6114] memfd_create("syzkaller", 0 [pid 5829] <... openat resumed>) = 3 [pid 6114] <... memfd_create resumed>) = 3 [pid 6112] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] newfstatat(3, "", [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6112] <... openat resumed>) = 4 [ 78.651571][ T6112] loop2: detected capacity change from 0 to 1024 [ 78.665691][ T29] audit: type=1800 audit(1730647678.307:274): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 6114] <... mmap resumed>) = 0x7fd6d9800000 [pid 6113] <... write resumed>) = 524288 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6112] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6112] <... creat resumed>) = 5 [pid 6112] sync( [pid 6115] <... write resumed>) = 524288 [pid 6113] munmap(0x7fd6d9800000, 138412032 [pid 6114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] getdents64(3, [pid 6113] <... munmap resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./54/binderfs", [pid 6114] <... write resumed>) = 524288 [pid 6113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6115] munmap(0x7fd6d9800000, 138412032 [pid 5829] unlink("./54/binderfs" [pid 6115] <... munmap resumed>) = 0 [pid 6114] munmap(0x7fd6d9800000, 138412032 [pid 6113] <... openat resumed>) = 4 [pid 5829] <... unlink resumed>) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6115] <... openat resumed>) = 4 [ 78.728104][ T29] audit: type=1800 audit(1730647678.367:275): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 6114] <... munmap resumed>) = 0 [pid 6113] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... umount2 resumed>) = 0 [pid 5829] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./54/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5829] close(3 [pid 6114] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./54") = 0 [pid 5829] mkdir("./55", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 6113] <... ioctl resumed>) = 0 [pid 6113] close(3) = 0 [pid 6114] <... ioctl resumed>) = 0 [pid 6113] close(4 [pid 6115] <... ioctl resumed>) = 0 [pid 6114] close(3 [pid 6112] <... sync resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6115] close(3 [pid 6114] <... close resumed>) = 0 [pid 6112] exit_group(0 [pid 6115] <... close resumed>) = 0 [pid 6114] close(4 [pid 6112] <... exit_group resumed>) = ? [pid 6115] close(4 [pid 6114] <... close resumed>) = 0 [pid 6113] <... close resumed>) = 0 [pid 6112] +++ exited with 0 +++ [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6115] <... close resumed>) = 0 [pid 6114] mkdir("./file1", 0777 [pid 6113] mkdir("./file1", 0777 [pid 6115] mkdir("./file1", 0777 [pid 6114] <... mkdir resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6115] <... mkdir resumed>) = 0 [pid 6114] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6113] <... mkdir resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6116 attached [pid 6114] <... mount resumed>) = 0 [pid 6114] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6116] set_robust_list(0x555557df1660, 24 [pid 6114] <... openat resumed>) = 3 [pid 6113] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6116 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6115] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6116] chdir("./55" [pid 6114] chdir("./file1") = 0 [pid 5831] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6116] <... chdir resumed>) = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6116] <... prctl resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 6116] setpgid(0, 0 [pid 5831] newfstatat(3, "", [pid 6116] <... setpgid resumed>) = 0 [pid 6114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6115] <... mount resumed>) = 0 [pid 6114] chdir("./file0" [pid 6113] <... mount resumed>) = 0 [pid 5831] getdents64(3, [pid 6116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6116] <... openat resumed>) = 3 [ 78.772350][ T6113] loop4: detected capacity change from 0 to 1024 [ 78.772425][ T6115] loop1: detected capacity change from 0 to 1024 [ 78.786441][ T6114] loop3: detected capacity change from 0 to 1024 [pid 6113] <... openat resumed>) = 3 [pid 5831] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6116] write(3, "1000", 4 [pid 6115] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6113] chdir("./file1" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] <... write resumed>) = 4 [pid 6115] <... openat resumed>) = 3 [pid 6114] <... chdir resumed>) = 0 [pid 6113] <... chdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./54/binderfs", [pid 6116] close(3 [pid 6115] chdir("./file1" [pid 6114] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6116] <... close resumed>) = 0 [pid 6115] <... chdir resumed>) = 0 [pid 6114] <... openat resumed>) = 4 [pid 5831] unlink("./54/binderfs" [pid 6116] symlink("/dev/binderfs", "./binderfs" [pid 6113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6116] <... symlink resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6113] chdir("./file0" [pid 5831] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6115] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6115] chdir("./file0"executing program [pid 6116] write(1, "executing program\n", 18 [pid 6114] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6116] <... write resumed>) = 18 [pid 6113] <... chdir resumed>) = 0 [pid 6116] memfd_create("syzkaller", 0 [pid 6113] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6115] <... chdir resumed>) = 0 [pid 6115] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6116] <... memfd_create resumed>) = 3 [pid 6113] <... openat resumed>) = 4 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6115] <... openat resumed>) = 4 [pid 6115] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6113] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6115] sync( [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6114] <... creat resumed>) = 5 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6114] sync( [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./54/file1") = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./54") = 0 [pid 5831] mkdir("./55", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [ 78.840414][ T29] audit: type=1800 audit(1730647678.477:276): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5831] close(3) = 0 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6113] <... creat resumed>) = 5 [pid 6113] sync( [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557df1650) = 6117 ./strace-static-x86_64: Process 6117 attached [pid 6117] set_robust_list(0x555557df1660, 24) = 0 [pid 6117] chdir("./55") = 0 [pid 6117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6117] setpgid(0, 0) = 0 [pid 6117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6116] <... write resumed>) = 524288 [pid 6113] <... sync resumed>) = 0 [pid 6113] exit_group(0 [pid 6116] munmap(0x7fd6d9800000, 138412032 [pid 6117] write(3, "1000", 4 [pid 6116] <... munmap resumed>) = 0 [pid 6117] <... write resumed>) = 4 [pid 6117] close(3 [ 78.892462][ T29] audit: type=1800 audit(1730647678.507:277): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 78.919157][ T29] audit: type=1800 audit(1730647678.507:278): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program [pid 6113] <... exit_group resumed>) = ? [pid 6117] <... close resumed>) = 0 [pid 6116] <... openat resumed>) = 4 [pid 6117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6117] write(1, "executing program\n", 18) = 18 [pid 6117] memfd_create("syzkaller", 0) = 3 [pid 6113] +++ exited with 0 +++ [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6116] ioctl(4, LOOP_SET_FD, 3 [pid 6117] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6116] <... ioctl resumed>) = 0 [pid 6115] <... sync resumed>) = 0 [pid 6114] <... sync resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6116] close(3 [pid 6115] exit_group(0 [pid 6114] exit_group(0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6116] <... close resumed>) = 0 [pid 6115] <... exit_group resumed>) = ? [pid 6114] <... exit_group resumed>) = ? [pid 6116] close(4 [pid 5833] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6116] <... close resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6117] <... write resumed>) = 524288 [pid 6116] mkdir("./file1", 0777 [pid 6115] +++ exited with 0 +++ [pid 6114] +++ exited with 0 +++ [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5833] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./54/binderfs") = 0 [pid 5833] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6117] munmap(0x7fd6d9800000, 138412032 [pid 6116] <... mkdir resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6117] <... munmap resumed>) = 0 [pid 6116] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./54/file1", [pid 5832] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6117] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6117] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5830] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6117] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(4, "", [pid 5832] getdents64(3, [pid 5830] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] getdents64(4, [pid 5832] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5833] getdents64(4, [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] unlink("./56/binderfs" [pid 5833] close(4 [pid 5832] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./54/file1") = 0 [pid 6117] <... ioctl resumed>) = 0 [pid 6116] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 6117] close(3 [pid 6116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6117] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6117] close(4 [pid 6116] <... openat resumed>) = 3 [pid 5830] getdents64(3, [pid 6117] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6117] mkdir("./file1", 0777 [pid 6116] chdir("./file1" [pid 5830] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6117] <... mkdir resumed>) = 0 [pid 6116] <... chdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 5832] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(3 [pid 5832] newfstatat(AT_FDCWD, "./56/file1", [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] rmdir("./54" [pid 5832] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6117] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5832] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6116] chdir("./file0" [pid 5832] newfstatat(4, "", [pid 5830] unlink("./54/binderfs" [pid 5833] mkdir("./55", 0777 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5830] <... unlink resumed>) = 0 [pid 6116] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 6117] <... mount resumed>) = 0 [pid 6116] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5832] rmdir("./56/file1") = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 6117] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] rmdir("./56" [pid 6117] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... rmdir resumed>) = 0 [pid 6117] chdir("./file1" [pid 5832] mkdir("./57", 0777 [pid 6117] <... chdir resumed>) = 0 [pid 6116] <... openat resumed>) = 4 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... mkdir resumed>) = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6116] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5832] <... openat resumed>) = 3 [ 78.945773][ T6116] loop0: detected capacity change from 0 to 1024 [ 78.979553][ T6117] loop2: detected capacity change from 0 to 1024 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... close resumed>) = 0 [pid 6117] chdir("./file0" [pid 6116] <... creat resumed>) = 5 [pid 5832] <... ioctl resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] close(3./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x555557df1660, 24 [pid 6116] sync( [pid 5830] newfstatat(AT_FDCWD, "./54/file1", [pid 6118] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6118 [pid 6118] chdir("./55" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] <... chdir resumed>) = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6117] <... chdir resumed>) = 0 [pid 5830] umount2("./54/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6117] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6117] <... openat resumed>) = 4 [pid 5830] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6117] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] getdents64(4, [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6119 attached [pid 6118] <... prctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6118] setpgid(0, 0 [pid 6117] <... creat resumed>) = 5 [pid 5830] getdents64(4, [pid 6118] <... setpgid resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] close(4 [pid 6119] set_robust_list(0x555557df1660, 24 [pid 6118] <... openat resumed>) = 3 [pid 6117] sync( [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6119 [pid 5830] <... close resumed>) = 0 [pid 6119] <... set_robust_list resumed>) = 0 [pid 6118] write(3, "1000", 4 [pid 6116] <... sync resumed>) = 0 [pid 5830] rmdir("./54/file1" [pid 6119] chdir("./57" [pid 6118] <... write resumed>) = 4 [pid 6116] exit_group(0 [pid 5830] <... rmdir resumed>) = 0 [pid 6119] <... chdir resumed>) = 0 [pid 6118] close(3 [pid 6116] <... exit_group resumed>) = ? [pid 5830] getdents64(3, [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6118] <... close resumed>) = 0 [pid 6119] <... prctl resumed>) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs" [pid 6119] setpgid(0, 0 [pid 6118] <... symlink resumed>) = 0 [pid 6117] <... sync resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6119] <... setpgid resumed>) = 0 executing program [pid 6117] exit_group(0 [pid 6116] +++ exited with 0 +++ [pid 5830] close(3 [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6118] write(1, "executing program\n", 18 [pid 5830] <... close resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6116, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6118] <... write resumed>) = 18 [pid 6117] <... exit_group resumed>) = ? [pid 5830] rmdir("./54" [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6119] <... openat resumed>) = 3 [pid 6118] memfd_create("syzkaller", 0 [pid 6117] +++ exited with 0 +++ [pid 5830] <... rmdir resumed>) = 0 [pid 6118] <... memfd_create resumed>) = 3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6117, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6119] write(3, "1000", 4 [pid 6118] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] mkdir("./55", 0777 [pid 6119] <... write resumed>) = 4 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6119] close(3 [pid 5829] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6119] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6119] symlink("/dev/binderfs", "./binderfs" [pid 5829] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6119] <... symlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 5829] <... openat resumed>) = 3 [pid 6119] write(1, "executing program\n", 18 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 6119] <... write resumed>) = 18 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6119] memfd_create("syzkaller", 0 [pid 5831] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... ioctl resumed>) = 0 [pid 5829] getdents64(3, [pid 6119] <... memfd_create resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] close(3 [pid 5829] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6119] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] unlink("./55/binderfs" [pid 5831] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5831] unlink("./55/binderfs") = 0 [pid 5829] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6120 attached [pid 6119] <... write resumed>) = 524288 [pid 6118] <... write resumed>) = 524288 [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6120] set_robust_list(0x555557df1660, 24) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6120 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] chdir("./55") = 0 [pid 5831] newfstatat(AT_FDCWD, "./55/file1", [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./55/file1", [pid 6120] <... prctl resumed>) = 0 [pid 5831] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6120] setpgid(0, 0 [pid 6118] <... munmap resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6120] <... setpgid resumed>) = 0 [pid 6119] munmap(0x7fd6d9800000, 138412032 [pid 5831] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6119] <... munmap resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6120] <... openat resumed>) = 3 [pid 6118] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 6120] write(3, "1000", 4 [pid 6119] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6118] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 6120] <... write resumed>) = 4 [pid 6119] <... openat resumed>) = 4 [pid 6118] ioctl(4, LOOP_SET_FD, 3 [pid 5831] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6120] close(3 [pid 6119] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 6120] <... close resumed>) = 0 [pid 6119] <... ioctl resumed>) = 0 [pid 6118] <... ioctl resumed>) = 0 [pid 5831] getdents64(4, [pid 6120] symlink("/dev/binderfs", "./binderfs" [pid 6119] close(3 [pid 6118] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6119] <... close resumed>) = 0 [pid 6118] <... close resumed>) = 0 [pid 5831] close(4 [pid 5829] getdents64(4, [pid 6120] <... symlink resumed>) = 0 [pid 6119] close(4executing program [pid 6118] close(4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6120] write(1, "executing program\n", 18 [pid 5831] <... close resumed>) = 0 [pid 6120] <... write resumed>) = 18 [pid 5829] close(4 [pid 6120] memfd_create("syzkaller", 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./55/file1") = 0 [pid 6120] <... memfd_create resumed>) = 3 [pid 6119] <... close resumed>) = 0 [pid 6118] <... close resumed>) = 0 [pid 5831] rmdir("./55/file1" [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6118] mkdir("./file1", 0777 [pid 5829] getdents64(3, [pid 6120] <... mmap resumed>) = 0x7fd6d9800000 [pid 6119] mkdir("./file1", 0777 [pid 6118] <... mkdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6119] <... mkdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6118] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./55" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] close(3 [pid 6119] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... close resumed>) = 0 [pid 5829] mkdir("./56", 0777 [pid 6118] <... mount resumed>) = 0 [pid 5831] rmdir("./55" [pid 5829] <... mkdir resumed>) = 0 [pid 6118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... rmdir resumed>) = 0 [pid 6118] <... openat resumed>) = 3 [pid 5831] mkdir("./56", 0777 [pid 6118] chdir("./file1" [pid 6119] <... mount resumed>) = 0 [pid 6118] <... chdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6118] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6119] <... openat resumed>) = 3 [pid 6118] chdir("./file0" [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6119] chdir("./file1" [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [ 79.139497][ T6118] loop4: detected capacity change from 0 to 1024 [ 79.140251][ T6119] loop3: detected capacity change from 0 to 1024 [pid 6119] <... chdir resumed>) = 0 [pid 5831] close(3 [pid 5829] close(3 [pid 6119] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 6119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6119] chdir("./file0" [pid 5831] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6119] <... chdir resumed>) = 0 [pid 6119] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000./strace-static-x86_64: Process 6121 attached [pid 6118] <... chdir resumed>) = 0 [pid 6121] set_robust_list(0x555557df1660, 24 [pid 6119] <... openat resumed>) = 4 [pid 6118] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6121] <... set_robust_list resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6121 [pid 6119] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6121] chdir("./56" [pid 6118] <... openat resumed>) = 4 [pid 6121] <... chdir resumed>) = 0 [pid 6118] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6122 attached [pid 6120] <... write resumed>) = 524288 [pid 6122] set_robust_list(0x555557df1660, 24 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6122] <... set_robust_list resumed>) = 0 [pid 6121] <... prctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6122 [pid 6122] chdir("./56" [pid 6118] <... creat resumed>) = 5 [pid 6122] <... chdir resumed>) = 0 [pid 6121] setpgid(0, 0 [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6121] <... setpgid resumed>) = 0 [pid 6118] sync( [pid 6122] <... prctl resumed>) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6120] munmap(0x7fd6d9800000, 138412032 [pid 6119] <... creat resumed>) = 5 [pid 6122] setpgid(0, 0) = 0 [pid 6121] <... openat resumed>) = 3 [pid 6120] <... munmap resumed>) = 0 [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6121] write(3, "1000", 4 [pid 6122] <... openat resumed>) = 3 [pid 6121] <... write resumed>) = 4 [pid 6121] close(3 [pid 6120] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6119] sync( [pid 6122] write(3, "1000", 4 [pid 6121] <... close resumed>) = 0 [pid 6120] <... openat resumed>) = 4 [pid 6121] symlink("/dev/binderfs", "./binderfs" [pid 6122] <... write resumed>) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6122] close(3 [pid 6121] <... symlink resumed>) = 0 [pid 6122] <... close resumed>) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6122] write(1, "executing program\n", 18) = 18 [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6121] write(1, "executing program\n", 18executing program ) = 18 [pid 6121] memfd_create("syzkaller", 0) = 3 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6120] <... ioctl resumed>) = 0 [pid 6119] <... sync resumed>) = 0 [pid 6118] <... sync resumed>) = 0 [pid 6121] <... mmap resumed>) = 0x7fd6d9800000 [pid 6120] close(3 [pid 6118] exit_group(0 [pid 6120] <... close resumed>) = 0 [pid 6120] close(4) = 0 [pid 6119] exit_group(0 [pid 6120] mkdir("./file1", 0777 [pid 6119] <... exit_group resumed>) = ? [pid 6120] <... mkdir resumed>) = 0 [pid 6119] +++ exited with 0 +++ [pid 6120] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6118] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6122] <... write resumed>) = 524288 [pid 6121] <... write resumed>) = 524288 [pid 6118] +++ exited with 0 +++ [pid 5832] <... restart_syscall resumed>) = 0 [pid 6122] munmap(0x7fd6d9800000, 138412032 [pid 6121] munmap(0x7fd6d9800000, 138412032 [pid 6120] <... mount resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6118, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6122] <... munmap resumed>) = 0 [pid 6120] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6121] <... munmap resumed>) = 0 [pid 6120] <... openat resumed>) = 3 [pid 5832] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6122] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6120] chdir("./file1" [pid 5833] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] <... openat resumed>) = 4 [pid 6121] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6120] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] ioctl(4, LOOP_SET_FD, 3 [pid 6121] <... openat resumed>) = 4 [pid 6120] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [ 79.239343][ T6120] loop1: detected capacity change from 0 to 1024 [pid 6121] ioctl(4, LOOP_SET_FD, 3 [pid 6120] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 6120] chdir("./file0" [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] getdents64(3, [pid 5833] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] unlink("./55/binderfs" [pid 6122] <... ioctl resumed>) = 0 [pid 6120] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6122] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] <... close resumed>) = 0 [pid 6120] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6122] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./57/binderfs") = 0 [pid 6122] <... close resumed>) = 0 [pid 5832] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6122] mkdir("./file1", 0777) = 0 [pid 5833] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6120] <... openat resumed>) = 4 [pid 6120] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6122] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6121] <... ioctl resumed>) = 0 [pid 6120] <... creat resumed>) = 5 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6120] sync( [pid 6121] close(3) = 0 [pid 6121] close(4) = 0 [pid 6121] mkdir("./file1", 0777 [pid 6122] <... mount resumed>) = 0 [pid 6122] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file1") = 0 [pid 5832] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6122] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] chdir("./file0" [pid 5833] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./57/file1", [pid 6122] <... chdir resumed>) = 0 [pid 6121] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6120] <... sync resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./55/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 79.301155][ T6122] loop2: detected capacity change from 0 to 1024 [ 79.301199][ T6121] loop0: detected capacity change from 0 to 1024 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6122] <... openat resumed>) = 4 [pid 6121] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6120] exit_group(0 [pid 5833] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6121] <... mount resumed>) = 0 [pid 6120] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 6121] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6120] +++ exited with 0 +++ [pid 5833] <... openat resumed>) = 4 [pid 5832] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6121] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 6121] chdir("./file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6122] <... creat resumed>) = 5 [pid 6121] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6122] sync( [pid 6121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 6121] chdir("./file0" [pid 5833] close(4 [pid 5832] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] rmdir("./57/file1" [pid 6121] <... chdir resumed>) = 0 [pid 5833] rmdir("./55/file1" [pid 6121] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6121] <... openat resumed>) = 4 [pid 6121] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6122] <... sync resumed>) = 0 [pid 6121] <... creat resumed>) = 5 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6122] exit_group(0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6122] <... exit_group resumed>) = ? [pid 6121] sync( [pid 5833] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] +++ exited with 0 +++ [pid 6121] <... sync resumed>) = 0 [pid 5832] close(3) = 0 [pid 6121] exit_group(0 [pid 5833] close(3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6122, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... openat resumed>) = 3 [pid 6121] <... exit_group resumed>) = ? [pid 5833] <... close resumed>) = 0 [pid 5832] rmdir("./57" [pid 5830] newfstatat(3, "", [pid 5833] rmdir("./55") = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6121] +++ exited with 0 +++ [pid 5833] mkdir("./56", 0777 [pid 5832] mkdir("./58", 0777 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5832] <... ioctl resumed>) = 0 [pid 5831] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 5830] unlink("./55/binderfs" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", [pid 5830] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6123 attached [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6123 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./56/binderfs", [pid 6123] set_robust_list(0x555557df1660, 24 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6123] <... set_robust_list resumed>) = 0 [pid 6123] chdir("./56" [pid 5829] unlink("./56/binderfs" [pid 5831] <... openat resumed>) = 3 [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6123] <... chdir resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6124 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6124 attached [pid 6123] <... prctl resumed>) = 0 [pid 5831] getdents64(3, [pid 6124] set_robust_list(0x555557df1660, 24 [pid 6123] setpgid(0, 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6123] <... setpgid resumed>) = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6124] <... set_robust_list resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6124] chdir("./58" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./55/file1", [pid 6124] <... chdir resumed>) = 0 [pid 6123] write(3, "1000", 4 [pid 5831] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6123] <... write resumed>) = 4 executing program [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./55/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6124] <... prctl resumed>) = 0 [pid 6123] close(3 [pid 5831] unlink("./56/binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] <... close resumed>) = 0 [pid 6123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6123] write(1, "executing program\n", 18 [pid 5831] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6124] setpgid(0, 0 [pid 6123] <... write resumed>) = 18 [pid 6123] memfd_create("syzkaller", 0 [pid 5830] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(AT_FDCWD, "./56/file1", [pid 6124] <... setpgid resumed>) = 0 [pid 6123] <... memfd_create resumed>) = 3 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6123] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(4, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] newfstatat(AT_FDCWD, "./56/file1", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6124] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] close(4 [pid 5829] close(4 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6124] write(3, "1000", 4 [pid 5831] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] rmdir("./55/file1" [pid 5829] rmdir("./56/file1" [pid 6124] <... write resumed>) = 4 [pid 6124] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6124] <... close resumed>) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs" [pid 5831] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(3, [pid 5829] getdents64(3, executing program [pid 6124] <... symlink resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6124] write(1, "executing program\n", 18) = 18 [pid 5831] newfstatat(4, "", [pid 5830] close(3 [pid 5829] close(3 [pid 6124] memfd_create("syzkaller", 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6124] <... memfd_create resumed>) = 3 [pid 5830] rmdir("./55" [pid 5829] rmdir("./56" [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6124] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] getdents64(4, [pid 5830] mkdir("./56", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] mkdir("./57", 0777 [pid 5831] getdents64(4, [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./56/file1" [pid 5830] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] getdents64(3, [pid 5830] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] close(3 [pid 6123] <... write resumed>) = 524288 [pid 5831] <... close resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] rmdir("./56" [pid 5829] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 6125 attached [pid 5831] mkdir("./57", 0777 [pid 6123] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6125 [pid 6123] <... munmap resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6123] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... ioctl resumed>) = 0 [pid 6123] <... openat resumed>) = 4 [pid 5831] close(3 [pid 6123] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6126 attached [pid 6125] set_robust_list(0x555557df1660, 24 [pid 6124] <... write resumed>) = 524288 [pid 6123] <... ioctl resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6127 attached [pid 6126] set_robust_list(0x555557df1660, 24 [pid 6125] <... set_robust_list resumed>) = 0 [pid 6127] set_robust_list(0x555557df1660, 24 [pid 6126] <... set_robust_list resumed>) = 0 [pid 6125] chdir("./56" [pid 6124] munmap(0x7fd6d9800000, 138412032 [pid 6123] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6127 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6126 [pid 6125] <... chdir resumed>) = 0 [pid 6126] chdir("./57" [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6127] <... set_robust_list resumed>) = 0 [pid 6124] <... munmap resumed>) = 0 [pid 6123] <... close resumed>) = 0 [pid 6127] chdir("./57" [pid 6123] close(4) = 0 [pid 6127] <... chdir resumed>) = 0 [pid 6123] mkdir("./file1", 0777 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6124] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6123] <... mkdir resumed>) = 0 [pid 6127] <... prctl resumed>) = 0 [pid 6124] <... openat resumed>) = 4 [pid 6123] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6127] setpgid(0, 0 [pid 6124] ioctl(4, LOOP_SET_FD, 3 [pid 6127] <... setpgid resumed>) = 0 [pid 6125] <... prctl resumed>) = 0 [pid 6126] <... chdir resumed>) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6125] setpgid(0, 0 [pid 6127] <... openat resumed>) = 3 [pid 6125] <... setpgid resumed>) = 0 [pid 6126] <... prctl resumed>) = 0 [pid 6127] write(3, "1000", 4 [pid 6126] setpgid(0, 0 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] <... write resumed>) = 4 [pid 6126] <... setpgid resumed>) = 0 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs" [pid 6125] <... openat resumed>) = 3 [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] <... symlink resumed>) = 0 executing program [pid 6126] <... openat resumed>) = 3 [pid 6125] write(3, "1000", 4 [pid 6127] write(1, "executing program\n", 18) = 18 [pid 6126] write(3, "1000", 4 [pid 6125] <... write resumed>) = 4 [pid 6123] <... mount resumed>) = 0 [pid 6127] memfd_create("syzkaller", 0 [pid 6126] <... write resumed>) = 4 [pid 6125] close(3 [pid 6123] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6127] <... memfd_create resumed>) = 3 [pid 6126] close(3 [pid 6125] <... close resumed>) = 0 [pid 6123] <... openat resumed>) = 3 [pid 6123] chdir("./file1") = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs" [pid 6126] <... close resumed>) = 0 [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6123] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6127] <... mmap resumed>) = 0x7fd6d9800000 [pid 6126] symlink("/dev/binderfs", "./binderfs" [pid 6125] <... symlink resumed>) = 0 [pid 6123] <... openat resumed>) = -1 EBUSY (Device or resource busy) executing program executing program [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6126] <... symlink resumed>) = 0 [pid 6125] write(1, "executing program\n", 18 [pid 6123] chdir("./file0" [pid 6126] write(1, "executing program\n", 18 [pid 6125] <... write resumed>) = 18 [pid 6126] <... write resumed>) = 18 [pid 6126] memfd_create("syzkaller", 0 [pid 6125] memfd_create("syzkaller", 0 [pid 6123] <... chdir resumed>) = 0 [pid 6126] <... memfd_create resumed>) = 3 [pid 6125] <... memfd_create resumed>) = 3 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6126] <... mmap resumed>) = 0x7fd6d9800000 [pid 6125] <... mmap resumed>) = 0x7fd6d9800000 [pid 6124] <... ioctl resumed>) = 0 [pid 6123] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6124] close(3 [pid 6123] <... openat resumed>) = 4 [pid 6124] <... close resumed>) = 0 [pid 6124] close(4) = 0 [pid 6124] mkdir("./file1", 0777) = 0 [pid 6123] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6124] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6127] <... write resumed>) = 524288 [pid 6123] <... creat resumed>) = 5 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6123] sync( [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6124] <... mount resumed>) = 0 [pid 6124] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6124] chdir("./file1") = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 79.535019][ T6123] loop4: detected capacity change from 0 to 1024 [ 79.568442][ T6124] loop3: detected capacity change from 0 to 1024 [pid 6124] chdir("./file0" [pid 6127] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6126] <... write resumed>) = 524288 [pid 6125] <... write resumed>) = 524288 [pid 6124] <... chdir resumed>) = 0 [pid 6123] <... sync resumed>) = 0 [pid 6124] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6123] exit_group(0) = ? [pid 6127] <... openat resumed>) = 4 [pid 6125] munmap(0x7fd6d9800000, 138412032 [pid 6124] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6123] +++ exited with 0 +++ [pid 6127] ioctl(4, LOOP_SET_FD, 3 [pid 6126] munmap(0x7fd6d9800000, 138412032 [pid 6125] <... munmap resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6124] <... creat resumed>) = 5 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6126] <... munmap resumed>) = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6124] sync( [pid 5833] <... restart_syscall resumed>) = 0 [pid 6125] <... openat resumed>) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3 [pid 5833] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./56/binderfs") = 0 [pid 5833] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] <... ioctl resumed>) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] mkdir("./file1", 0777 [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6125] <... ioctl resumed>) = 0 [pid 6127] <... mkdir resumed>) = 0 [pid 6126] ioctl(4, LOOP_SET_FD, 3 [pid 6125] close(3 [pid 6124] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6124] exit_group(0) = ? [pid 6124] +++ exited with 0 +++ [pid 6127] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6124, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6127] <... mount resumed>) = 0 [pid 6126] <... ioctl resumed>) = 0 [pid 6125] <... close resumed>) = 0 [pid 5833] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6126] close(3 [pid 6125] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6127] <... openat resumed>) = 3 [pid 6126] <... close resumed>) = 0 [pid 6125] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./56/file1", [pid 6127] chdir("./file1" [pid 6126] close(4 [pid 6125] mkdir("./file1", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6127] <... chdir resumed>) = 0 [pid 6126] <... close resumed>) = 0 [pid 6125] <... mkdir resumed>) = 0 [pid 5833] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6126] mkdir("./file1", 0777 [pid 6125] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6127] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6126] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6125] <... mount resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 6127] chdir("./file0" [pid 6125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6126] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6125] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 6125] chdir("./file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6125] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(4 [pid 5832] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6127] <... chdir resumed>) = 0 [pid 6125] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6127] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] rmdir("./56/file1" [pid 5832] newfstatat(3, "", [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6126] <... mount resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] getdents64(3, [pid 6127] <... openat resumed>) = 4 [pid 6126] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6127] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6126] <... openat resumed>) = 3 [ 79.640617][ T6127] loop2: detected capacity change from 0 to 1024 [ 79.655864][ T6125] loop1: detected capacity change from 0 to 1024 [ 79.677351][ T6126] loop0: detected capacity change from 0 to 1024 [pid 5833] close(3 [pid 5832] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] chdir("./file1" [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] <... chdir resumed>) = 0 [pid 6125] <... chdir resumed>) = 0 [pid 5833] rmdir("./56" [pid 5832] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] mkdir("./57", 0777 [pid 5832] unlink("./58/binderfs" [pid 6126] chdir("./file0" [pid 6125] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 6127] <... creat resumed>) = 5 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] sync( [pid 6125] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 6125] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 6125] <... creat resumed>) = 5 [pid 5833] close(3 [pid 6125] sync( [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6128 attached [pid 5832] newfstatat(AT_FDCWD, "./58/file1", [pid 6128] set_robust_list(0x555557df1660, 24 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6128] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6128 [pid 5832] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6128] chdir("./57" [pid 6127] <... sync resumed>) = 0 [pid 6125] <... sync resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6128] <... chdir resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6127] exit_group(0 [pid 6125] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6128] <... prctl resumed>) = 0 [pid 6127] <... exit_group resumed>) = ? [pid 6126] <... chdir resumed>) = 0 [pid 6125] <... exit_group resumed>) = ? [pid 5832] getdents64(4, [pid 6128] setpgid(0, 0 [pid 6127] +++ exited with 0 +++ [pid 6126] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6125] +++ exited with 0 +++ [pid 6126] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 6128] <... setpgid resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] getdents64(4, [pid 6128] <... openat resumed>) = 3 [pid 6126] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6128] write(3, "1000", 4 [pid 5832] close(4 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6128] <... write resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 6128] close(3 [pid 5832] rmdir("./58/file1" [pid 5830] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] <... symlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6128] write(1, "executing program\n", 18 executing program [pid 5832] getdents64(3, [pid 5830] newfstatat(3, "", [pid 5831] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5831] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... openat resumed>) = 3 [pid 6128] memfd_create("syzkaller", 0 [pid 5832] close(3 [pid 6126] <... creat resumed>) = 5 [pid 5832] <... close resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6128] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./58" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6126] sync( [pid 5832] <... rmdir resumed>) = 0 [pid 5830] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] mkdir("./59", 0777 [pid 5831] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./56/binderfs" [pid 5831] unlink("./57/binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6126] <... sync resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] exit_group(0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 6126] <... exit_group resumed>) = ? [pid 6128] <... write resumed>) = 524288 [pid 6126] +++ exited with 0 +++ [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6128] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6128] <... munmap resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] close(3 [pid 5830] <... umount2 resumed>) = 0 [pid 5831] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5830] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... restart_syscall resumed>) = 0 [pid 6128] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 5831] newfstatat(AT_FDCWD, "./57/file1", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./56/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6129 attached [pid 6128] <... ioctl resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6129 [pid 5831] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 6129] set_robust_list(0x555557df1660, 24 [pid 6128] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(4, "", [pid 5829] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] <... set_robust_list resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6129] chdir("./59" [pid 6128] close(4 [pid 5831] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6129] <... chdir resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6128] mkdir("./file1", 0777 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5829] newfstatat(3, "", [pid 6129] <... prctl resumed>) = 0 [pid 6128] <... mkdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] setpgid(0, 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 5829] getdents64(3, [pid 6129] <... setpgid resumed>) = 0 [pid 5831] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6128] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5829] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] <... openat resumed>) = 3 [pid 5831] close(4 [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6129] write(3, "1000", 4 [pid 5831] <... close resumed>) = 0 [pid 5830] rmdir("./56/file1" [pid 5829] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6129] <... write resumed>) = 4 [pid 5831] rmdir("./57/file1" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6129] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] unlink("./57/binderfs" [pid 6129] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] <... unlink resumed>) = 0 [pid 6129] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5829] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] <... symlink resumed>) = 0 [pid 6128] <... mount resumed>) = 0 [pid 5831] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... close resumed>) = 0 [pid 5830] close(3 [pid 6129] write(1, "executing program\n", 18 [pid 5829] <... umount2 resumed>) = 0 executing program [pid 6129] <... write resumed>) = 18 [pid 5831] rmdir("./57" [pid 6129] memfd_create("syzkaller", 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6129] <... memfd_create resumed>) = 3 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5831] mkdir("./58", 0777 [pid 6128] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 6128] chdir("./file1" [pid 5830] rmdir("./56" [pid 5829] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6128] <... chdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6129] <... write resumed>) = 524288 [pid 6128] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 79.831870][ T6128] loop4: detected capacity change from 0 to 1024 [pid 5830] mkdir("./57", 0777 [pid 6128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... mkdir resumed>) = 0 [pid 6128] chdir("./file0" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 6128] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6129] munmap(0x7fd6d9800000, 138412032 [pid 6128] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] newfstatat(AT_FDCWD, "./57/file1", [pid 6129] <... munmap resumed>) = 0 [pid 6128] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 3 [pid 6129] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6128] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6130 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6130 attached [pid 6129] <... openat resumed>) = 4 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 5831] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] sync( [pid 5829] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 6130] set_robust_list(0x555557df1660, 24) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6130] chdir("./57") = 0 [pid 6129] <... ioctl resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6131 attached ) = 0 [pid 6129] close(3 [pid 6128] <... sync resumed>) = 0 [pid 5829] close(4 [pid 6130] setpgid(0, 0 [pid 6129] <... close resumed>) = 0 [pid 6128] exit_group(0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6131 [pid 6129] close(4 [pid 6131] set_robust_list(0x555557df1660, 24 [pid 5829] <... close resumed>) = 0 [pid 6130] <... setpgid resumed>) = 0 [pid 6129] <... close resumed>) = 0 [pid 6131] <... set_robust_list resumed>) = 0 [pid 6129] mkdir("./file1", 0777 [pid 6128] <... exit_group resumed>) = ? [pid 5829] rmdir("./57/file1" [pid 6131] chdir("./58" [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6129] <... mkdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6131] <... chdir resumed>) = 0 [pid 6130] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 6129] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6128] +++ exited with 0 +++ [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 6130] write(3, "1000", 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6131] <... prctl resumed>) = 0 [pid 6130] <... write resumed>) = 4 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5829] rmdir("./57" [pid 6131] setpgid(0, 0 [pid 6130] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 6131] <... setpgid resumed>) = 0 [pid 5829] mkdir("./58", 0777 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... mkdir resumed>) = 0 [pid 6131] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6131] write(3, "1000", 4 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6131] <... write resumed>) = 4 [pid 5829] <... ioctl resumed>) = 0 [pid 6131] close(3 [pid 5829] close(3 [pid 6131] <... close resumed>) = 0 [pid 6130] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs" [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6131] write(1, "executing program\n", 18 [pid 6130] <... symlink resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 executing program executing program [pid 6130] write(1, "executing program\n", 18 [pid 6131] <... write resumed>) = 18 [pid 6131] memfd_create("syzkaller", 0 [pid 6130] <... write resumed>) = 18 [pid 6131] <... memfd_create resumed>) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6130] memfd_create("syzkaller", 0 [pid 5833] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6131] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 6132 attached [pid 6130] <... memfd_create resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6132 [ 79.912049][ T6129] loop3: detected capacity change from 0 to 1024 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6129] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6132] set_robust_list(0x555557df1660, 24 [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6130] <... mmap resumed>) = 0x7fd6d9800000 [pid 6132] <... set_robust_list resumed>) = 0 [pid 6129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... openat resumed>) = 3 [pid 6132] chdir("./58" [pid 5833] newfstatat(3, "", [pid 6129] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6131] <... write resumed>) = 524288 [pid 6132] <... chdir resumed>) = 0 [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6129] chdir("./file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6131] munmap(0x7fd6d9800000, 138412032 [pid 5833] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6132] <... prctl resumed>) = 0 [pid 6131] <... munmap resumed>) = 0 [pid 6129] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6132] setpgid(0, 0 [pid 6131] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] unlink("./57/binderfs" [pid 6131] <... openat resumed>) = 4 [pid 6131] ioctl(4, LOOP_SET_FD, 3 [pid 6132] <... setpgid resumed>) = 0 [pid 6130] <... write resumed>) = 524288 [pid 6129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... unlink resumed>) = 0 [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6132] <... openat resumed>) = 3 [pid 6129] chdir("./file0" [pid 6132] write(3, "1000", 4) = 4 [pid 6132] close(3) = 0 [pid 6132] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6132] write(1, "executing program\n", 18) = 18 [pid 6130] munmap(0x7fd6d9800000, 138412032 [pid 6132] memfd_create("syzkaller", 0 [pid 6130] <... munmap resumed>) = 0 [pid 6129] <... chdir resumed>) = 0 [pid 6132] <... memfd_create resumed>) = 3 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6131] <... ioctl resumed>) = 0 [pid 6132] <... mmap resumed>) = 0x7fd6d9800000 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6129] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6131] close(3 [pid 6130] <... openat resumed>) = 4 [pid 5833] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6131] <... close resumed>) = 0 [pid 6130] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6131] close(4 [pid 6129] <... openat resumed>) = 4 [pid 6129] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6131] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./57/file1", [pid 6131] mkdir("./file1", 0777 [pid 6129] <... creat resumed>) = 5 [pid 6131] <... mkdir resumed>) = 0 [pid 6129] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6132] <... write resumed>) = 524288 [pid 6131] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6130] <... ioctl resumed>) = 0 [pid 5833] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6132] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6130] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6130] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6132] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6130] close(4 [pid 5833] <... openat resumed>) = 4 [pid 6132] <... openat resumed>) = 4 [pid 6131] <... mount resumed>) = 0 [pid 6130] <... close resumed>) = 0 [pid 6131] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6130] mkdir("./file1", 0777 [pid 5833] newfstatat(4, "", [pid 6132] ioctl(4, LOOP_SET_FD, 3 [pid 6131] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6132] <... ioctl resumed>) = 0 [pid 6131] chdir("./file1" [pid 6130] <... mkdir resumed>) = 0 [pid 5833] getdents64(4, [pid 6132] close(3 [pid 6131] <... chdir resumed>) = 0 [pid 6132] <... close resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6130] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6129] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6132] close(4 [pid 6131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6129] exit_group(0 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6131] chdir("./file0" [pid 5833] close(4) = 0 [pid 5833] rmdir("./57/file1" [pid 6129] <... exit_group resumed>) = ? [pid 5833] <... rmdir resumed>) = 0 [pid 6132] <... close resumed>) = 0 [pid 6131] <... chdir resumed>) = 0 [pid 6130] <... mount resumed>) = 0 [pid 6129] +++ exited with 0 +++ [pid 5833] getdents64(3, [pid 6132] mkdir("./file1", 0777 [pid 6131] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6129, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6132] <... mkdir resumed>) = 0 [pid 6130] <... openat resumed>) = 3 [pid 5833] close(3 [pid 6132] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6130] chdir("./file1" [pid 5832] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", [pid 6130] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6131] <... openat resumed>) = 4 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] rmdir("./57" [pid 5832] getdents64(3, [pid 6131] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 80.004684][ T6131] loop2: detected capacity change from 0 to 1024 [ 80.017990][ T6130] loop1: detected capacity change from 0 to 1024 [ 80.043795][ T6132] loop0: detected capacity change from 0 to 1024 [pid 6130] chdir("./file0" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6130] <... chdir resumed>) = 0 [pid 5833] mkdir("./58", 0777 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... mount resumed>) = 0 [pid 6130] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6132] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6131] <... creat resumed>) = 5 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6132] <... openat resumed>) = 3 [pid 5832] unlink("./59/binderfs" [pid 6132] chdir("./file1" [pid 5832] <... unlink resumed>) = 0 [pid 6132] <... chdir resumed>) = 0 [pid 6131] sync( [pid 6130] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6132] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6130] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 3 [pid 6132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6132] chdir("./file0" [pid 5833] <... ioctl resumed>) = 0 [pid 6130] <... creat resumed>) = 5 [pid 5833] close(3 [pid 6132] <... chdir resumed>) = 0 [pid 6130] sync( [pid 5832] <... umount2 resumed>) = 0 [pid 6132] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6132] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6133 attached [pid 5832] newfstatat(AT_FDCWD, "./59/file1", [pid 6133] set_robust_list(0x555557df1660, 24) = 0 [pid 6133] chdir("./58") = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6133 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0 [pid 6132] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6133] <... setpgid resumed>) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6133] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 4 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs" [pid 6132] <... creat resumed>) = 5 [pid 5832] newfstatat(4, "", [pid 6133] <... symlink resumed>) = 0 executing program [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6132] sync( [pid 6133] write(1, "executing program\n", 18) = 18 [pid 6133] memfd_create("syzkaller", 0) = 3 [pid 5832] getdents64(4, [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6131] <... sync resumed>) = 0 [pid 6131] exit_group(0 [pid 6130] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6131] <... exit_group resumed>) = ? [pid 6130] exit_group(0 [pid 5832] getdents64(4, [pid 6131] +++ exited with 0 +++ [pid 6130] <... exit_group resumed>) = ? [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] close(4) = 0 [pid 5832] rmdir("./59/file1" [pid 6130] +++ exited with 0 +++ [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6132] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 6132] exit_group(0 [pid 5832] <... close resumed>) = 0 [pid 6132] <... exit_group resumed>) = ? [pid 5832] rmdir("./59") = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5832] mkdir("./60", 0777) = 0 [pid 6132] +++ exited with 0 +++ [pid 5831] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6132, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... openat resumed>) = 3 [pid 5830] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] getdents64(3, [pid 5831] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6133] <... write resumed>) = 524288 [pid 5832] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./58/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./58/binderfs" [pid 5830] unlink("./57/binderfs" [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6133] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6133] <... munmap resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6134 attached [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 6134] set_robust_list(0x555557df1660, 24 [pid 6133] <... openat resumed>) = 4 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6134 [pid 5830] newfstatat(AT_FDCWD, "./57/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6134] <... set_robust_list resumed>) = 0 [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(3, [pid 6134] chdir("./60" [pid 5830] umount2("./57/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6134] <... chdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6134] <... prctl resumed>) = 0 [pid 6134] setpgid(0, 0 [pid 6133] <... ioctl resumed>) = 0 [pid 5831] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 6134] <... setpgid resumed>) = 0 [pid 6133] close(3 [pid 5830] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6133] <... close resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./58/file1", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6134] <... openat resumed>) = 3 [pid 6133] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./58/binderfs") = 0 [pid 5829] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6134] write(3, "1000", 4 [pid 6133] <... close resumed>) = 0 [pid 5831] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6134] <... write resumed>) = 4 [pid 5830] getdents64(4, [pid 6134] close(3 [pid 6133] mkdir("./file1", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6134] <... close resumed>) = 0 [pid 6133] <... mkdir resumed>) = 0 [pid 5830] close(4 [pid 6134] symlink("/dev/binderfs", "./binderfs" [pid 5831] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... close resumed>) = 0 [pid 6133] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] rmdir("./57/file1"executing program [pid 5829] <... umount2 resumed>) = 0 [pid 6134] <... symlink resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 6134] write(1, "executing program\n", 18 [pid 5830] <... rmdir resumed>) = 0 [pid 6134] <... write resumed>) = 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6134] memfd_create("syzkaller", 0 [pid 5831] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] close(3 [pid 5831] getdents64(4, [pid 6134] <... memfd_create resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] close(4 [pid 5830] rmdir("./57" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6134] <... mmap resumed>) = 0x7fd6d9800000 [pid 6133] <... mount resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6133] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] rmdir("./58/file1" [pid 5829] newfstatat(AT_FDCWD, "./58/file1", [pid 6133] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [ 80.191912][ T6133] loop4: detected capacity change from 0 to 1024 [pid 5830] mkdir("./58", 0777 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6133] chdir("./file1" [pid 5831] getdents64(3, [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6133] <... chdir resumed>) = 0 [pid 5829] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] rmdir("./58" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 5829] newfstatat(4, "", [pid 6133] chdir("./file0" [pid 5830] <... close resumed>) = 0 [pid 5831] mkdir("./59", 0777 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6133] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] getdents64(4, [pid 6133] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6134] <... write resumed>) = 524288 [pid 6133] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] getdents64(4, [pid 6134] munmap(0x7fd6d9800000, 138412032 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6134] <... munmap resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] close(4 [pid 6133] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] close(3 [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x555557df1660, 24 [pid 5829] rmdir("./58/file1" [pid 6135] <... set_robust_list resumed>) = 0 [pid 6135] chdir("./58" [pid 6134] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 6134] <... openat resumed>) = 4 [pid 5829] getdents64(3, [pid 6135] <... chdir resumed>) = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6134] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6135] <... prctl resumed>) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6135 [pid 5829] close(3 [pid 6135] write(3, "1000", 4 [pid 5831] <... close resumed>) = 0 [pid 6133] <... creat resumed>) = 5 [pid 6135] <... write resumed>) = 4 [pid 6135] close(3) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6135] write(1, "executing program\n", 18 [pid 6134] <... ioctl resumed>) = 0 [pid 6133] sync( [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... close resumed>) = 0 [pid 6134] close(3 [pid 6135] <... write resumed>) = 18 [pid 6135] memfd_create("syzkaller", 0) = 3 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6134] <... close resumed>) = 0 [pid 6135] <... mmap resumed>) = 0x7fd6d9800000 [pid 6134] close(4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6136 [pid 5829] rmdir("./58" [pid 6134] <... close resumed>) = 0 [pid 6134] mkdir("./file1", 0777 [pid 5829] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x555557df1660, 24 [pid 6134] <... mkdir resumed>) = 0 [pid 5829] mkdir("./59", 0777 [pid 6136] <... set_robust_list resumed>) = 0 [pid 6136] chdir("./59") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6136] write(3, "1000", 4 [pid 6134] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6136] <... write resumed>) = 4 [pid 6135] <... write resumed>) = 524288 [pid 6134] <... mount resumed>) = 0 [pid 6136] close(3 [pid 6135] munmap(0x7fd6d9800000, 138412032 [pid 6134] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6136] <... close resumed>) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs" [pid 6135] <... munmap resumed>) = 0 [pid 6135] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6134] <... openat resumed>) = 3 [pid 6135] <... openat resumed>) = 4 [ 80.285636][ T6134] loop3: detected capacity change from 0 to 1024 [pid 6134] chdir("./file1" [pid 6135] ioctl(4, LOOP_SET_FD, 3 [pid 6134] <... chdir resumed>) = 0 [pid 6136] <... symlink resumed>) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... mkdir resumed>) = 0 [pid 6134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6134] chdir("./file0" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 6136] write(1, "executing program\n", 18executing program ) = 18 [pid 5829] <... close resumed>) = 0 [pid 6136] memfd_create("syzkaller", 0 [pid 6135] <... ioctl resumed>) = 0 [pid 6134] <... chdir resumed>) = 0 [pid 6133] <... sync resumed>) = 0 [pid 6136] <... memfd_create resumed>) = 3 [pid 6135] close(3 [pid 6134] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6133] exit_group(0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6135] <... close resumed>) = 0 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6133] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6137 attached [pid 6135] close(4 [pid 6137] set_robust_list(0x555557df1660, 24 [pid 6135] <... close resumed>) = 0 [pid 6134] <... openat resumed>) = 4 [pid 6133] +++ exited with 0 +++ [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6137 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6135] mkdir("./file1", 0777 [pid 6134] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6137] chdir("./59" [pid 6135] <... mkdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6137] <... chdir resumed>) = 0 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6135] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6137] setpgid(0, 0 [pid 6134] <... creat resumed>) = 5 [pid 6134] sync( [pid 6137] <... setpgid resumed>) = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] write(3, "1000", 4 [pid 5833] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6137] <... write resumed>) = 4 [pid 6137] close(3 [pid 5833] newfstatat(3, "", [pid 6137] <... close resumed>) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 6137] <... symlink resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6137] write(1, "executing program\n", 18 [pid 5833] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6137] <... write resumed>) = 18 [pid 6136] <... write resumed>) = 524288 [pid 6135] <... mount resumed>) = 0 [pid 5833] unlink("./58/binderfs" [pid 6137] memfd_create("syzkaller", 0 [pid 6135] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] <... memfd_create resumed>) = 3 [pid 6135] chdir("./file1") = 0 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6135] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 80.355918][ T6135] loop1: detected capacity change from 0 to 1024 [pid 6136] munmap(0x7fd6d9800000, 138412032 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6136] <... munmap resumed>) = 0 [pid 6135] chdir("./file0" [pid 6136] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... umount2 resumed>) = 0 [pid 6137] <... write resumed>) = 524288 [pid 6136] <... openat resumed>) = 4 [pid 6135] <... chdir resumed>) = 0 [pid 6134] <... sync resumed>) = 0 [pid 6136] ioctl(4, LOOP_SET_FD, 3 [pid 5833] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] munmap(0x7fd6d9800000, 138412032 [pid 6135] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6134] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... munmap resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6135] <... openat resumed>) = 4 [pid 5833] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] <... openat resumed>) = 4 [pid 6135] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6136] <... ioctl resumed>) = 0 [pid 6134] <... exit_group resumed>) = ? [pid 5833] <... openat resumed>) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 6136] close(3 [pid 6135] <... creat resumed>) = 5 [pid 6134] +++ exited with 0 +++ [pid 5833] newfstatat(4, "", [pid 6136] <... close resumed>) = 0 [pid 6136] close(4) = 0 [pid 6136] mkdir("./file1", 0777 [pid 6135] sync( [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6136] <... mkdir resumed>) = 0 [pid 6137] <... ioctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6137] close(3 [pid 6136] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] getdents64(4, [pid 6137] <... close resumed>) = 0 [pid 6137] close(4) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] mkdir("./file1", 0777 [pid 6135] <... sync resumed>) = 0 [pid 6137] <... mkdir resumed>) = 0 [pid 6135] exit_group(0 [pid 5833] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6135] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6135] +++ exited with 0 +++ [pid 5832] <... openat resumed>) = 3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] close(4 [pid 5832] newfstatat(3, "", [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 6137] <... mount resumed>) = 0 [pid 5833] rmdir("./58/file1" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6137] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6136] <... mount resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6137] <... openat resumed>) = 3 [pid 6136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] chdir("./file1" [pid 6136] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 6137] <... chdir resumed>) = 0 [pid 6136] chdir("./file1" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5830] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6136] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6136] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... close resumed>) = 0 [pid 5832] unlink("./60/binderfs" [pid 5830] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] chdir("./file0" [pid 6136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] rmdir("./58" [pid 5832] <... unlink resumed>) = 0 [pid 6136] chdir("./file0" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5833] mkdir("./59", 0777 [pid 5830] newfstatat(3, "", [pid 6137] <... chdir resumed>) = 0 [pid 6136] <... chdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6137] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] getdents64(3, [ 80.429868][ T6136] loop2: detected capacity change from 0 to 1024 [ 80.440675][ T6137] loop0: detected capacity change from 0 to 1024 [pid 6136] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6137] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... umount2 resumed>) = 0 [pid 5830] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6136] <... openat resumed>) = 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5830] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6136] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] unlink("./58/binderfs" [pid 5833] close(3) = 0 [pid 5832] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6136] <... creat resumed>) = 5 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 6136] sync( [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6137] <... creat resumed>) = 5 ./strace-static-x86_64: Process 6138 attached [pid 5832] close(4) = 0 [pid 5832] rmdir("./60/file1") = 0 [pid 6138] set_robust_list(0x555557df1660, 24) = 0 [pid 6138] chdir("./59" [pid 6137] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6138 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6138] <... chdir resumed>) = 0 [pid 5832] close(3 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] <... close resumed>) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 5832] rmdir("./60" [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6138] <... openat resumed>) = 3 [pid 6138] write(3, "1000", 4 [pid 5832] mkdir("./61", 0777 [pid 6138] <... write resumed>) = 4 [pid 5832] <... mkdir resumed>) = 0 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6138] write(1, "executing program\n", 18 [pid 5832] ioctl(3, LOOP_CLR_FDexecuting program [pid 6138] <... write resumed>) = 18 [pid 5832] <... ioctl resumed>) = 0 [pid 6138] memfd_create("syzkaller", 0 [pid 5832] close(3 [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./58/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 5832] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(4, ./strace-static-x86_64: Process 6139 attached 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 6139] set_robust_list(0x555557df1660, 24 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6139] <... set_robust_list resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6139 [pid 5830] close(4 [pid 6139] chdir("./61") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... close resumed>) = 0 [pid 6139] <... prctl resumed>) = 0 [pid 5830] rmdir("./58/file1" [pid 6139] setpgid(0, 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6139] <... setpgid resumed>) = 0 [pid 5830] getdents64(3, [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6137] <... sync resumed>) = 0 [pid 6136] <... sync resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6137] exit_group(0 [pid 6136] exit_group(0 [pid 6139] <... openat resumed>) = 3 [pid 6137] <... exit_group resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6136] <... exit_group resumed>) = ? [pid 5830] close(3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6139] write(1, "executing program\n", 18 [pid 6136] +++ exited with 0 +++ [pid 5830] <... close resumed>) = 0 [pid 6139] <... write resumed>) = 18 [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6138] <... write resumed>) = 524288 [pid 5830] rmdir("./58" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6139] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6138] munmap(0x7fd6d9800000, 138412032 [pid 5830] mkdir("./59", 0777 [pid 5829] <... openat resumed>) = 3 [pid 5831] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... mkdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5831] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6138] <... munmap resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./59/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... unlink resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... ioctl resumed>) = 0 [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] close(3 [pid 5829] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] <... write resumed>) = 524288 [pid 5829] <... umount2 resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6138] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 5831] unlink("./59/binderfs" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./59/file1" [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6139] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./59" [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... rmdir resumed>) = 0 [pid 6139] <... openat resumed>) = 4 [pid 6139] ioctl(4, LOOP_SET_FD, 3 [pid 5831] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] mkdir("./60", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6140 attached [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6140 [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 6140] set_robust_list(0x555557df1660, 24 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6140] <... set_robust_list resumed>) = 0 [pid 5831] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] <... ioctl resumed>) = 0 [pid 6140] chdir("./59" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6140] <... chdir resumed>) = 0 [pid 6138] close(3 [pid 5831] newfstatat(AT_FDCWD, "./59/file1", [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] <... close resumed>) = 0 [pid 6140] <... prctl resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6138] close(4 [pid 6140] setpgid(0, 0 [pid 5831] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6140] <... setpgid resumed>) = 0 [pid 6138] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6138] mkdir("./file1", 0777 [pid 5831] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6138] <... mkdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6141 attached [pid 6138] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... openat resumed>) = 4 [pid 6140] <... openat resumed>) = 3 [pid 5831] newfstatat(4, "", [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6141 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6140] write(3, "1000", 4 [pid 5831] getdents64(4, [pid 6140] <... write resumed>) = 4 [pid 6141] set_robust_list(0x555557df1660, 24 [pid 6140] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6140] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 6140] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 executing program [pid 6141] <... set_robust_list resumed>) = 0 [pid 6139] <... ioctl resumed>) = 0 [pid 6141] chdir("./60" [pid 6140] <... symlink resumed>) = 0 [pid 6139] close(3 [pid 5831] close(4 [pid 6140] write(1, "executing program\n", 18 [pid 6139] <... close resumed>) = 0 [pid 6139] close(4 [pid 5831] <... close resumed>) = 0 [pid 6140] <... write resumed>) = 18 [pid 6139] <... close resumed>) = 0 [pid 5831] rmdir("./59/file1" [pid 6140] memfd_create("syzkaller", 0 [pid 6141] <... chdir resumed>) = 0 [pid 6139] mkdir("./file1", 0777 [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6140] <... memfd_create resumed>) = 3 [pid 6139] <... mkdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6141] <... prctl resumed>) = 0 [pid 6139] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6141] setpgid(0, 0) = 0 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] write(3, "1000", 4) = 4 [pid 6141] close(3) = 0 [pid 6141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6138] <... mount resumed>) = 0 [pid 5831] getdents64(3, [pid 6140] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6138] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] close(3) = 0 executing program [pid 6141] write(1, "executing program\n", 18 [pid 6138] <... openat resumed>) = 3 [pid 6141] <... write resumed>) = 18 [pid 6141] memfd_create("syzkaller", 0) = 3 [pid 6138] chdir("./file1" [pid 5831] rmdir("./59" [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6138] <... chdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [ 80.588903][ T6138] loop4: detected capacity change from 0 to 1024 [ 80.593836][ T6139] loop3: detected capacity change from 0 to 1024 [pid 6138] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6141] <... mmap resumed>) = 0x7fd6d9800000 [pid 6139] <... mount resumed>) = 0 [pid 6138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6138] chdir("./file0" [pid 6139] <... openat resumed>) = 3 [pid 6139] chdir("./file1") = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6139] chdir("./file0") = 0 [pid 6139] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] <... chdir resumed>) = 0 [pid 5831] mkdir("./60", 0777 [pid 6138] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... mkdir resumed>) = 0 [pid 6139] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6138] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6141] <... write resumed>) = 524288 [pid 6138] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 6139] <... creat resumed>) = 5 [pid 5831] close(3 [pid 6139] sync( [pid 6140] <... write resumed>) = 524288 [pid 6141] munmap(0x7fd6d9800000, 138412032 [pid 6140] munmap(0x7fd6d9800000, 138412032 [pid 6138] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 6138] sync( [pid 6141] <... munmap resumed>) = 0 [pid 6140] <... munmap resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6140] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6139] <... sync resumed>) = 0 ./strace-static-x86_64: Process 6142 attached [pid 6141] <... openat resumed>) = 4 [pid 6140] <... openat resumed>) = 4 [pid 6138] <... sync resumed>) = 0 [pid 6141] ioctl(4, LOOP_SET_FD, 3 [pid 6139] exit_group(0) = ? [pid 6138] exit_group(0 [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6139] +++ exited with 0 +++ [pid 6142] set_robust_list(0x555557df1660, 24) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6142] chdir("./60" [pid 6138] <... exit_group resumed>) = ? [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6142 [pid 6142] <... chdir resumed>) = 0 [pid 6138] +++ exited with 0 +++ [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6142] <... prctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] setpgid(0, 0 [pid 5832] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6142] <... setpgid resumed>) = 0 [pid 6140] <... ioctl resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6141] <... ioctl resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6142] <... openat resumed>) = 3 [pid 6141] close(3 [pid 6140] close(3 [pid 5832] newfstatat(3, "", [pid 6142] write(3, "1000", 4 [pid 6141] <... close resumed>) = 0 [pid 6140] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6142] <... write resumed>) = 4 [pid 6141] close(4 [pid 6140] close(4 [pid 5833] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, [pid 6142] close(3 [pid 6141] <... close resumed>) = 0 [pid 6140] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] <... close resumed>) = 0 [pid 6141] mkdir("./file1", 0777 [pid 6140] mkdir("./file1", 0777 [pid 5833] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6142] symlink("/dev/binderfs", "./binderfs" [pid 6141] <... mkdir resumed>) = 0 [pid 6140] <... mkdir resumed>) = 0 [pid 6140] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6142] <... symlink resumed>) = 0 [pid 6141] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... openat resumed>) = 3 [pid 5832] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6142] write(1, "executing program\n", 18executing program ) = 18 [pid 5833] newfstatat(3, "", [pid 6142] memfd_create("syzkaller", 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 80.706894][ T6141] loop0: detected capacity change from 0 to 1024 [ 80.709722][ T6140] loop1: detected capacity change from 0 to 1024 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] <... memfd_create resumed>) = 3 [pid 6141] <... mount resumed>) = 0 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6141] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6142] <... mmap resumed>) = 0x7fd6d9800000 [pid 6141] <... openat resumed>) = 3 [pid 6141] chdir("./file1" [pid 6140] <... mount resumed>) = 0 [pid 6141] <... chdir resumed>) = 0 [pid 6140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6140] <... openat resumed>) = 3 [pid 6141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6140] chdir("./file1" [pid 5833] getdents64(3, [pid 6141] chdir("./file0" [pid 6140] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6140] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6140] chdir("./file0" [pid 5833] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5832] unlink("./61/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] unlink("./59/binderfs" [pid 5832] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6141] <... chdir resumed>) = 0 [pid 6140] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 6141] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6140] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6141] <... openat resumed>) = 4 [pid 6140] <... openat resumed>) = 4 [pid 6140] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6142] <... write resumed>) = 524288 [pid 6141] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6142] munmap(0x7fd6d9800000, 138412032 [pid 5832] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6142] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6142] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(AT_FDCWD, "./59/file1", [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6141] <... creat resumed>) = 5 [pid 6140] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 4 [pid 6141] sync( [pid 5833] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./59/file1" [pid 6140] sync( [pid 5833] <... rmdir resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 6142] <... ioctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6142] close(3 [pid 5832] close(4 [pid 6142] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6142] close(4 [pid 5832] rmdir("./61/file1" [pid 6142] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 6142] mkdir("./file1", 0777 [pid 5833] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] rmdir("./59" [pid 6142] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 6142] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./61" [pid 5833] mkdir("./60", 0777 [pid 6141] <... sync resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6141] exit_group(0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] mkdir("./62", 0777 [pid 6141] <... exit_group resumed>) = ? [pid 6142] <... mount resumed>) = 0 [pid 6141] +++ exited with 0 +++ [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... mkdir resumed>) = 0 [pid 6140] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6142] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6140] exit_group(0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6142] <... openat resumed>) = 3 [pid 6140] <... exit_group resumed>) = ? [pid 5833] <... ioctl resumed>) = 0 [pid 6142] chdir("./file1" [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6140] +++ exited with 0 +++ [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6142] <... chdir resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- [pid 5829] <... restart_syscall resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6142] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 6142] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6142] chdir("./file0" [pid 5833] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6142] <... chdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5830] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6142] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 80.802145][ T6142] loop2: detected capacity change from 0 to 1024 [pid 6142] <... openat resumed>) = 4 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5829] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5829] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./60/binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5829] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./59/binderfs"./strace-static-x86_64: Process 6143 attached [pid 6142] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6143 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6143] set_robust_list(0x555557df1660, 24 [pid 5830] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6144 attached [pid 6143] <... set_robust_list resumed>) = 0 [pid 6142] <... creat resumed>) = 5 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6144 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6144] set_robust_list(0x555557df1660, 24 [pid 6143] chdir("./60" [pid 6144] <... set_robust_list resumed>) = 0 [pid 6144] chdir("./62") = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] setpgid(0, 0) = 0 executing program [pid 6143] <... chdir resumed>) = 0 [pid 6142] sync( [pid 5830] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6144] write(3, "1000", 4) = 4 [pid 6144] close(3) = 0 [pid 5830] newfstatat(AT_FDCWD, "./59/file1", [pid 5829] newfstatat(AT_FDCWD, "./60/file1", [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./59/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6144] write(1, "executing program\n", 18 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6144] <... write resumed>) = 18 [pid 5829] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6144] memfd_create("syzkaller", 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 6144] <... memfd_create resumed>) = 3 [pid 6143] <... prctl resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6144] <... mmap resumed>) = 0x7fd6d9800000 [pid 6143] setpgid(0, 0 [pid 5830] newfstatat(4, "", [pid 6143] <... setpgid resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6143] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6143] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 6143] <... write resumed>) = 4 [pid 5830] close(4 [pid 5829] <... close resumed>) = 0 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6143] close(3 [pid 5830] <... close resumed>) = 0 [pid 5829] rmdir("./60/file1" [pid 6143] <... close resumed>) = 0 [pid 5830] rmdir("./59/file1" [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6142] <... sync resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6142] exit_group(0) = ? [pid 6143] write(1, "executing program\n", 18executing program ) = 18 [pid 5829] getdents64(3, [pid 6143] memfd_create("syzkaller", 0 [pid 5830] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6142] +++ exited with 0 +++ [pid 6144] <... write resumed>) = 524288 [pid 6143] <... memfd_create resumed>) = 3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 6144] munmap(0x7fd6d9800000, 138412032 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] close(3 [pid 5829] <... close resumed>) = 0 [pid 6144] <... munmap resumed>) = 0 [pid 6143] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... close resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] rmdir("./59" [pid 5829] rmdir("./60" [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./60", 0777 [pid 5829] mkdir("./61", 0777 [pid 5831] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... mkdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6144] <... ioctl resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 6144] close(3) = 0 [pid 6144] close(4) = 0 [pid 5831] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6144] mkdir("./file1", 0777 [pid 5830] <... mkdir resumed>) = 0 [pid 6144] <... mkdir resumed>) = 0 [pid 6144] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... ioctl resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] close(3 [pid 5829] <... close resumed>) = 0 [pid 6144] <... mount resumed>) = 0 [pid 6143] <... write resumed>) = 524288 [pid 5831] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6144] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6143] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./60/binderfs") = 0 [pid 5831] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] <... openat resumed>) = 3 [pid 6143] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6145 attached [pid 6144] chdir("./file1" [pid 6143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = 0 [pid 6145] set_robust_list(0x555557df1660, 24 [pid 6144] <... chdir resumed>) = 0 [pid 6143] <... openat resumed>) = 4 [pid 6145] <... set_robust_list resumed>) = 0 [ 80.927329][ T6144] loop3: detected capacity change from 0 to 1024 [pid 6144] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6145] chdir("./61" [pid 6144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6143] ioctl(4, LOOP_SET_FD, 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6145 [pid 6145] <... chdir resumed>) = 0 [pid 6144] chdir("./file0" [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6146 attached [pid 6145] setpgid(0, 0 [pid 6144] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] set_robust_list(0x555557df1660, 24 [pid 6145] <... setpgid resumed>) = 0 [pid 6144] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6146] <... set_robust_list resumed>) = 0 [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] newfstatat(AT_FDCWD, "./60/file1", [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6146 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6144] <... openat resumed>) = 4 [pid 6146] chdir("./60" [pid 5831] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6146] <... chdir resumed>) = 0 [pid 6145] <... openat resumed>) = 3 [pid 6144] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6145] write(3, "1000", 4 [pid 6146] <... prctl resumed>) = 0 [pid 6146] setpgid(0, 0 [pid 6145] <... write resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 6146] <... setpgid resumed>) = 0 [pid 6145] close(3 [pid 5831] rmdir("./60/file1" [pid 6145] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6145] symlink("/dev/binderfs", "./binderfs" [pid 5831] getdents64(3, [pid 6146] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6145] <... symlink resumed>) = 0 [pid 5831] close(3executing program [pid 6145] write(1, "executing program\n", 18 [pid 6144] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 6146] write(3, "1000", 4 [pid 6145] <... write resumed>) = 18 [pid 6144] sync( [pid 5831] rmdir("./60" [pid 6146] <... write resumed>) = 4 [pid 6145] memfd_create("syzkaller", 0 [pid 6143] <... ioctl resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6146] close(3 [pid 6145] <... memfd_create resumed>) = 3 [pid 6143] close(3 [pid 6146] <... close resumed>) = 0 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6143] <... close resumed>) = 0 [pid 5831] mkdir("./61", 0777 [pid 6146] symlink("/dev/binderfs", "./binderfs" [pid 6145] <... mmap resumed>) = 0x7fd6d9800000 [pid 6146] <... symlink resumed>) = 0 [pid 6143] close(4 [pid 5831] <... mkdir resumed>) = 0 [pid 6143] <... close resumed>) = 0 [pid 6143] mkdir("./file1", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3executing program [pid 6146] write(1, "executing program\n", 18 [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6146] <... write resumed>) = 18 [pid 6146] memfd_create("syzkaller", 0 [pid 6143] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... close resumed>) = 0 [pid 6146] <... memfd_create resumed>) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6147 attached [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6143] <... mount resumed>) = 0 [pid 6143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6147 [pid 6143] <... openat resumed>) = 3 [pid 6143] chdir("./file1" [pid 6147] set_robust_list(0x555557df1660, 24 [pid 6143] <... chdir resumed>) = 0 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6147] chdir("./61" [pid 6143] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6143] chdir("./file0" [pid 6147] <... chdir resumed>) = 0 [ 80.975148][ T6143] loop4: detected capacity change from 0 to 1024 [pid 6147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] <... chdir resumed>) = 0 [pid 6147] setpgid(0, 0) = 0 [pid 6143] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] <... openat resumed>) = 4 [pid 6147] write(3, "1000", 4) = 4 [pid 6147] close(3 [pid 6143] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6147] <... close resumed>) = 0 [pid 6147] symlink("/dev/binderfs", "./binderfs" [pid 6144] <... sync resumed>) = 0 [pid 6147] <... symlink resumed>) = 0 executing program [pid 6147] write(1, "executing program\n", 18) = 18 [pid 6147] memfd_create("syzkaller", 0 [pid 6145] <... write resumed>) = 524288 [pid 6144] exit_group(0 [pid 6147] <... memfd_create resumed>) = 3 [pid 6143] <... creat resumed>) = 5 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6143] sync( [pid 6146] <... write resumed>) = 524288 [pid 6144] <... exit_group resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6145] munmap(0x7fd6d9800000, 138412032 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6143] <... sync resumed>) = 0 [pid 6146] munmap(0x7fd6d9800000, 138412032 [pid 6145] <... munmap resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6147] <... write resumed>) = 524288 [pid 6143] exit_group(0 [pid 6145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6146] <... munmap resumed>) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6145] <... openat resumed>) = 4 [pid 6145] ioctl(4, LOOP_SET_FD, 3 [pid 5832] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6146] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] <... exit_group resumed>) = ? [pid 5832] <... openat resumed>) = 3 [pid 6143] +++ exited with 0 +++ [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] getdents64(3, [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./62/binderfs") = 0 [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 5832] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] <... umount2 resumed>) = 0 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6147] munmap(0x7fd6d9800000, 138412032 [pid 5833] getdents64(3, [pid 5832] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6147] <... munmap resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./62/file1", [pid 5833] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6147] <... openat resumed>) = 4 [pid 5833] unlink("./60/binderfs" [pid 5832] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] <... ioctl resumed>) = 0 [pid 6145] <... ioctl resumed>) = 0 [pid 6146] close(3 [pid 6145] close(3 [pid 6146] <... close resumed>) = 0 [pid 6145] <... close resumed>) = 0 [pid 6146] close(4 [pid 6145] close(4) = 0 [pid 5833] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] <... close resumed>) = 0 [pid 6145] mkdir("./file1", 0777 [pid 5832] <... openat resumed>) = 4 [pid 6147] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5833] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6146] mkdir("./file1", 0777 [pid 6147] close(3 [pid 6145] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 6147] <... close resumed>) = 0 [pid 6147] close(4 [pid 6146] <... mkdir resumed>) = 0 [pid 6145] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] newfstatat(AT_FDCWD, "./60/file1", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6147] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 6147] mkdir("./file1", 0777 [pid 6146] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6147] <... mkdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6147] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(4) = 0 [pid 5832] rmdir("./62/file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 6145] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(3, [pid 6145] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6146] <... mount resumed>) = 0 [pid 6145] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5832] close(3 [pid 6146] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6145] chdir("./file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6146] <... openat resumed>) = 3 [pid 6145] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... close resumed>) = 0 [pid 6147] <... mount resumed>) = 0 [pid 6146] chdir("./file1" [pid 6145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] rmdir("./62" [pid 6147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] getdents64(4, [pid 6147] <... openat resumed>) = 3 [pid 6146] <... chdir resumed>) = 0 [pid 6145] chdir("./file0" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6147] chdir("./file1" [pid 5833] close(4 [pid 6147] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./60/file1" [pid 6147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 6147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] mkdir("./63", 0777 [pid 6147] chdir("./file0" [pid 5832] <... mkdir resumed>) = 0 [pid 5833] getdents64(3, [pid 6146] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6146] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5833] rmdir("./60" [pid 6146] <... chdir resumed>) = 0 [pid 6145] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 6146] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6145] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] mkdir("./61", 0777 [pid 6147] <... chdir resumed>) = 0 [pid 6145] <... openat resumed>) = 4 [pid 5833] <... mkdir resumed>) = 0 [pid 6146] <... openat resumed>) = 4 [ 81.072399][ T6145] loop0: detected capacity change from 0 to 1024 [ 81.081805][ T6146] loop1: detected capacity change from 0 to 1024 [ 81.092223][ T6147] loop2: detected capacity change from 0 to 1024 [pid 5832] <... close resumed>) = 0 [pid 6147] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6146] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6145] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6147] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 6147] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6148 attached [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6149 attached [pid 6148] set_robust_list(0x555557df1660, 24 [pid 6146] <... creat resumed>) = 5 [pid 6145] <... creat resumed>) = 5 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6148 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6146] sync( [pid 6145] sync( [pid 6149] set_robust_list(0x555557df1660, 24 [pid 6148] chdir("./63" [pid 6147] <... creat resumed>) = 5 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6149 [pid 6149] <... set_robust_list resumed>) = 0 [pid 6148] <... chdir resumed>) = 0 [pid 6149] chdir("./61" [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6147] sync( [pid 6149] <... chdir resumed>) = 0 [pid 6148] <... prctl resumed>) = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6148] setpgid(0, 0 [pid 6149] <... prctl resumed>) = 0 [pid 6148] <... setpgid resumed>) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6148] write(3, "1000", 4) = 4 [pid 6149] <... openat resumed>) = 3 [pid 6148] close(3 [pid 6147] <... sync resumed>) = 0 [pid 6146] <... sync resumed>) = 0 [pid 6145] <... sync resumed>) = 0 [pid 6148] <... close resumed>) = 0 [pid 6146] exit_group(0 [pid 6148] symlink("/dev/binderfs", "./binderfs" [pid 6146] <... exit_group resumed>) = ? [pid 6145] exit_group(0 [pid 6147] exit_group(0 [pid 6148] <... symlink resumed>) = 0 [pid 6149] write(3, "1000", 4 [pid 6147] <... exit_group resumed>) = ? [pid 6149] <... write resumed>) = 4 [pid 6147] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 6145] <... exit_group resumed>) = ? [pid 6149] close(3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6147, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6149] <... close resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6145] +++ exited with 0 +++ [pid 6148] write(1, "executing program\n", 18executing program executing program [pid 6149] write(1, "executing program\n", 18 [pid 6148] <... write resumed>) = 18 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6149] <... write resumed>) = 18 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6148] memfd_create("syzkaller", 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6148] <... memfd_create resumed>) = 3 [pid 5830] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6149] <... mmap resumed>) = 0x7fd6d9800000 [pid 6148] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5831] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./60/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./61/binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5829] unlink("./61/binderfs" [pid 5831] <... unlink resumed>) = 0 [pid 5830] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6148] <... write resumed>) = 524288 [pid 5831] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6148] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6149] <... write resumed>) = 524288 [pid 6148] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6149] munmap(0x7fd6d9800000, 138412032 [pid 6148] <... openat resumed>) = 4 [pid 5831] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6149] <... munmap resumed>) = 0 [pid 6148] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./61/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./61/file1", [pid 5831] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5829] newfstatat(4, "", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5829] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] close(4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6148] <... ioctl resumed>) = 0 [pid 6149] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./60/file1", [pid 5829] getdents64(4, [pid 6149] ioctl(4, LOOP_SET_FD, 3 [pid 6148] close(3 [pid 5831] rmdir("./61/file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./61/file1" [pid 5831] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./61" [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5830] umount2("./60/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6148] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6149] <... ioctl resumed>) = 0 [pid 5829] rmdir("./61" [pid 6148] close(4 [pid 5830] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6148] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 6149] close(3 [pid 6148] mkdir("./file1", 0777 [pid 5830] newfstatat(4, "", [pid 6149] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] mkdir("./62", 0777 [pid 5830] getdents64(4, [pid 5829] mkdir("./62", 0777 [pid 6149] close(4 [pid 6148] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] getdents64(4, [pid 6149] <... close resumed>) = 0 [pid 6148] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6149] mkdir("./file1", 0777 [pid 5830] close(4 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] rmdir("./60/file1" [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] close(3 [pid 5829] <... ioctl resumed>) = 0 [pid 6149] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 6149] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6149] <... mount resumed>) = 0 [pid 6148] <... mount resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6148] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] close(3) = 0 [pid 6149] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6151 attached ./strace-static-x86_64: Process 6150 attached [pid 6148] <... openat resumed>) = 3 [pid 5830] rmdir("./60" [pid 6149] <... openat resumed>) = 3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6150 [ 81.259367][ T6148] loop3: detected capacity change from 0 to 1024 [ 81.267752][ T6149] loop4: detected capacity change from 0 to 1024 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6151 [pid 6151] set_robust_list(0x555557df1660, 24 [pid 6150] set_robust_list(0x555557df1660, 24 [pid 6149] chdir("./file1" [pid 6148] chdir("./file1" [pid 5830] <... rmdir resumed>) = 0 [pid 6148] <... chdir resumed>) = 0 [pid 6149] <... chdir resumed>) = 0 [pid 6151] <... set_robust_list resumed>) = 0 [pid 6150] <... set_robust_list resumed>) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6148] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] mkdir("./61", 0777 [pid 6151] chdir("./62" [pid 6150] chdir("./62" [pid 6149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... mkdir resumed>) = 0 [pid 6151] <... chdir resumed>) = 0 [pid 6150] <... chdir resumed>) = 0 [pid 6149] chdir("./file0" [pid 6148] chdir("./file0" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6151] <... prctl resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6151] setpgid(0, 0 [pid 6150] <... prctl resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6151] <... setpgid resumed>) = 0 [pid 6150] setpgid(0, 0 [pid 6149] <... chdir resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6150] <... setpgid resumed>) = 0 [pid 5830] close(3 [pid 6151] <... openat resumed>) = 3 [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6149] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6151] write(3, "1000", 4executing program [pid 6150] <... openat resumed>) = 3 [pid 6151] <... write resumed>) = 4 [pid 6149] <... openat resumed>) = 4 [pid 6151] close(3 [pid 6150] write(3, "1000", 4 [pid 6151] <... close resumed>) = 0 [pid 6150] <... write resumed>) = 4 [pid 6151] symlink("/dev/binderfs", "./binderfs" [pid 6150] close(3 [pid 6151] <... symlink resumed>) = 0 [pid 6150] <... close resumed>) = 0 [pid 6151] write(1, "executing program\n", 18 [pid 6150] symlink("/dev/binderfs", "./binderfs" [pid 6151] <... write resumed>) = 18 [pid 6150] <... symlink resumed>) = 0 [pid 6149] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000executing program [pid 6151] memfd_create("syzkaller", 0 [pid 6150] write(1, "executing program\n", 18 [pid 6148] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6151] <... memfd_create resumed>) = 3 [pid 6150] <... write resumed>) = 18 [pid 6148] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6150] memfd_create("syzkaller", 0 [pid 6149] <... creat resumed>) = 5 [pid 6148] <... openat resumed>) = 4 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6151] <... mmap resumed>) = 0x7fd6d9800000 [pid 6150] <... memfd_create resumed>) = 3 [pid 6148] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6149] sync(./strace-static-x86_64: Process 6152 attached [pid 6148] <... creat resumed>) = 5 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6152 [pid 6148] sync( [pid 6152] set_robust_list(0x555557df1660, 24 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6152] <... set_robust_list resumed>) = 0 [pid 6152] chdir("./61") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6152] write(3, "1000", 4) = 4 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6152] write(1, "executing program\n", 18) = 18 [pid 6152] memfd_create("syzkaller", 0) = 3 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6151] <... write resumed>) = 524288 [pid 6149] <... sync resumed>) = 0 [pid 6148] <... sync resumed>) = 0 [pid 6149] exit_group(0) = ? [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6150] <... write resumed>) = 524288 [pid 6148] exit_group(0 [pid 6149] +++ exited with 0 +++ [pid 6148] <... exit_group resumed>) = ? [pid 6151] munmap(0x7fd6d9800000, 138412032 [pid 6148] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6151] <... munmap resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6151] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6151] <... openat resumed>) = 4 [pid 6150] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... openat resumed>) = 3 [pid 6151] ioctl(4, LOOP_SET_FD, 3 [pid 6150] <... munmap resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 6152] <... write resumed>) = 524288 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 6152] munmap(0x7fd6d9800000, 138412032 [pid 6151] <... ioctl resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6152] <... munmap resumed>) = 0 [pid 5832] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./63/binderfs") = 0 [pid 6152] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] <... openat resumed>) = 4 [pid 6151] close(3 [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 6150] <... ioctl resumed>) = 0 [pid 6152] <... ioctl resumed>) = 0 [pid 6151] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6152] close(3) = 0 [pid 6151] close(4 [pid 6150] close(3 [pid 5832] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] close(4 [pid 6150] <... close resumed>) = 0 [pid 5833] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6150] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] <... close resumed>) = 0 [pid 6151] <... close resumed>) = 0 [pid 6150] mkdir("./file1", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6152] mkdir("./file1", 0777 [pid 6151] mkdir("./file1", 0777 [pid 5832] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6152] <... mkdir resumed>) = 0 [pid 6150] <... mkdir resumed>) = 0 [pid 5833] getdents64(3, [pid 6150] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6151] <... mkdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./61/binderfs") = 0 [pid 5833] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6151] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6150] <... mount resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 6150] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [ 81.404966][ T6151] loop0: detected capacity change from 0 to 1024 [ 81.412494][ T6150] loop2: detected capacity change from 0 to 1024 [ 81.423550][ T6152] loop1: detected capacity change from 0 to 1024 [pid 6150] <... openat resumed>) = 3 [pid 5832] getdents64(4, [pid 6150] chdir("./file1" [pid 5833] <... umount2 resumed>) = 0 [pid 6150] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] close(4 [pid 6150] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... close resumed>) = 0 [pid 6150] chdir("./file0" [pid 5832] rmdir("./63/file1") = 0 [pid 6151] <... mount resumed>) = 0 [pid 6150] <... chdir resumed>) = 0 [pid 5832] getdents64(3, [pid 6152] <... mount resumed>) = 0 [pid 6151] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6152] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6151] <... openat resumed>) = 3 [pid 6150] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 6151] chdir("./file1" [pid 5832] <... close resumed>) = 0 [pid 6151] <... chdir resumed>) = 0 [pid 5832] rmdir("./63" [pid 6151] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6152] <... openat resumed>) = 3 [pid 6151] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] chdir("./file1" [pid 5833] newfstatat(AT_FDCWD, "./61/file1", [pid 6152] <... chdir resumed>) = 0 [pid 6150] <... openat resumed>) = 4 [pid 5832] <... rmdir resumed>) = 0 [pid 6152] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6152] <... chdir resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 6152] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6152] <... openat resumed>) = 4 [pid 6151] chdir("./file0" [pid 6150] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] getdents64(4, [pid 5832] mkdir("./64", 0777 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5833] close(4 [pid 6151] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6152] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6151] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] rmdir("./61/file1" [pid 6150] <... creat resumed>) = 5 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6152] <... creat resumed>) = 5 [pid 6151] <... openat resumed>) = 4 [pid 6150] sync( [pid 5833] getdents64(3, [pid 5832] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 6152] sync( [pid 5833] rmdir("./61" [pid 5832] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./62", 0777 [pid 6151] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... close resumed>) = 0 [pid 6152] <... sync resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6152] exit_group(0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6152] <... exit_group resumed>) = ? [pid 6152] +++ exited with 0 +++ [pid 5833] <... openat resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6153 attached [pid 6151] <... creat resumed>) = 5 [pid 5833] <... ioctl resumed>) = 0 [pid 6153] set_robust_list(0x555557df1660, 24 [pid 5833] close(3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6153 [pid 6150] <... sync resumed>) = 0 [pid 6150] exit_group(0) = ? [pid 6151] sync( [pid 6150] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6153] <... set_robust_list resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6153] chdir("./64" [pid 5831] <... restart_syscall resumed>) = 0 [pid 6153] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6153] <... prctl resumed>) = 0 [pid 5830] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6153] setpgid(0, 0 [pid 5831] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... openat resumed>) = 3 [pid 6153] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6154 attached [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6154] set_robust_list(0x555557df1660, 24) = 0 [pid 5830] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6154] chdir("./62" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5830] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6153] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6154 [pid 5830] unlink("./61/binderfs" [pid 6154] <... chdir resumed>) = 0 [pid 6153] write(3, "1000", 4 [pid 5831] getdents64(3, [pid 5830] <... unlink resumed>) = 0 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6153] <... write resumed>) = 4 [pid 6151] <... sync resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6151] exit_group(0 [pid 5831] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6151] <... exit_group resumed>) = ? [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6153] close(3 [pid 6151] +++ exited with 0 +++ [pid 5831] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6153] <... close resumed>) = 0 [pid 5831] unlink("./62/binderfs" [pid 6154] <... prctl resumed>) = 0 [pid 6154] setpgid(0, 0) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... unlink resumed>) = 0 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6153] <... symlink resumed>) = 0 [pid 6154] <... openat resumed>) = 3 [pid 6154] write(3, "1000", 4) = 4 [pid 6154] close(3) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6154] write(1, "executing program\n", 18) = 18 [pid 6154] memfd_create("syzkaller", 0 [pid 5831] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6154] <... memfd_create resumed>) = 3 executing program [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6153] write(1, "executing program\n", 18 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6153] <... write resumed>) = 18 [pid 6154] <... mmap resumed>) = 0x7fd6d9800000 [pid 6153] memfd_create("syzkaller", 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6153] <... memfd_create resumed>) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6153] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./61/file1", [pid 5829] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5830] umount2("./61/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5831] newfstatat(AT_FDCWD, "./62/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(3, [pid 5831] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5830] newfstatat(4, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] getdents64(4, [pid 5829] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5830] getdents64(4, [pid 5831] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] close(4 [pid 5830] <... close resumed>) = 0 [pid 5829] unlink("./62/binderfs" [pid 5831] <... close resumed>) = 0 [pid 5830] rmdir("./61/file1" [pid 5831] rmdir("./62/file1" [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(3, [pid 5830] close(3) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./61" [pid 5831] close(3 [pid 5830] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./62" [pid 6153] <... write resumed>) = 524288 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] mkdir("./62", 0777 [pid 5831] mkdir("./63", 0777) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6153] munmap(0x7fd6d9800000, 138412032 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5829] <... umount2 resumed>) = 0 [pid 6154] <... write resumed>) = 524288 [pid 6153] <... munmap resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6154] munmap(0x7fd6d9800000, 138412032 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6154] <... munmap resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6153] <... openat resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./62/file1", [pid 6153] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6155 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6156 attached ./strace-static-x86_64: Process 6155 attached [pid 6154] close(3 [pid 6153] <... ioctl resumed>) = 0 [pid 5829] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] set_robust_list(0x555557df1660, 24 [pid 6154] <... close resumed>) = 0 [pid 6153] close(3 [pid 6156] set_robust_list(0x555557df1660, 24 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6154] close(4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6156 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6154] <... close resumed>) = 0 [pid 6156] <... set_robust_list resumed>) = 0 [pid 6154] mkdir("./file1", 0777 [pid 6156] chdir("./62" [pid 6154] <... mkdir resumed>) = 0 [pid 6156] <... chdir resumed>) = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6156] setpgid(0, 0 [pid 6154] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] <... setpgid resumed>) = 0 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... openat resumed>) = 4 [pid 6156] <... openat resumed>) = 3 [pid 6155] chdir("./63" [pid 6153] <... close resumed>) = 0 [pid 6156] write(3, "1000", 4 [pid 5829] newfstatat(4, "", [pid 6153] close(4 [pid 6155] <... chdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6153] <... close resumed>) = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] getdents64(4, [pid 6155] <... prctl resumed>) = 0 [pid 6153] mkdir("./file1", 0777 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6156] <... write resumed>) = 4 [pid 6155] setpgid(0, 0 [pid 6154] <... mount resumed>) = 0 [pid 6153] <... mkdir resumed>) = 0 [pid 5829] getdents64(4, [pid 6156] close(3 [pid 6155] <... setpgid resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6153] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6156] <... close resumed>) = 0 [pid 6154] <... openat resumed>) = 3 [pid 6156] symlink("/dev/binderfs", "./binderfs" [pid 6154] chdir("./file1" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6156] <... symlink resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6154] <... chdir resumed>) = 0 executing program [pid 5829] close(4 [pid 6156] write(1, "executing program\n", 18 [pid 6155] <... openat resumed>) = 3 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 6156] <... write resumed>) = 18 [pid 6155] write(3, "1000", 4 [pid 6154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 81.625700][ T6154] loop4: detected capacity change from 0 to 1024 [ 81.643077][ T6153] loop3: detected capacity change from 0 to 1024 [pid 5829] rmdir("./62/file1" [pid 6156] memfd_create("syzkaller", 0 [pid 6155] <... write resumed>) = 4 [pid 6154] chdir("./file0" [pid 5829] <... rmdir resumed>) = 0 [pid 6155] close(3 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 6156] <... memfd_create resumed>) = 3 [pid 5829] rmdir("./62" [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6156] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] mkdir("./63", 0777 [pid 6155] <... close resumed>) = 0 [pid 6154] <... chdir resumed>) = 0 [pid 6153] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] <... mkdir resumed>) = 0 [pid 6155] symlink("/dev/binderfs", "./binderfs" [pid 6153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6154] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 6153] <... openat resumed>) = 3 [pid 5829] close(3executing program [pid 6155] <... symlink resumed>) = 0 [pid 6153] chdir("./file1" [pid 5829] <... close resumed>) = 0 [pid 6153] <... chdir resumed>) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6154] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6155] write(1, "executing program\n", 18 [pid 6153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6155] <... write resumed>) = 18 [pid 6154] <... creat resumed>) = 5 [pid 6153] chdir("./file0" [pid 6155] memfd_create("syzkaller", 0) = 3 [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6154] sync( [pid 6153] <... chdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6157 attached [pid 6153] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6157] set_robust_list(0x555557df1660, 24 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6157 [pid 6157] <... set_robust_list resumed>) = 0 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6153] <... openat resumed>) = 4 [pid 6157] chdir("./63" [pid 6153] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6157] <... chdir resumed>) = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6157] setpgid(0, 0) = 0 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6153] <... creat resumed>) = 5 [pid 6157] <... openat resumed>) = 3 [pid 6153] sync( [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 6156] <... write resumed>) = 524288 [pid 6157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6156] munmap(0x7fd6d9800000, 138412032 [pid 6157] write(1, "executing program\n", 18 [pid 6156] <... munmap resumed>) = 0 executing program [pid 6157] <... write resumed>) = 18 [pid 6156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3 [pid 6157] memfd_create("syzkaller", 0 [pid 6155] <... write resumed>) = 524288 [pid 6157] <... memfd_create resumed>) = 3 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6156] <... ioctl resumed>) = 0 [pid 6155] munmap(0x7fd6d9800000, 138412032 [pid 6154] <... sync resumed>) = 0 [pid 6153] <... sync resumed>) = 0 [pid 6157] <... mmap resumed>) = 0x7fd6d9800000 [pid 6156] close(3 [pid 6155] <... munmap resumed>) = 0 [pid 6154] exit_group(0 [pid 6153] exit_group(0 [pid 6156] <... close resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6154] <... exit_group resumed>) = ? [pid 6153] <... exit_group resumed>) = ? [pid 6156] close(4 [pid 6155] <... openat resumed>) = 4 [pid 6154] +++ exited with 0 +++ [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6156] <... close resumed>) = 0 [pid 6155] ioctl(4, LOOP_SET_FD, 3 [pid 6153] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6156] mkdir("./file1", 0777) = 0 [pid 6156] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... restart_syscall resumed>) = 0 [pid 6156] <... mount resumed>) = 0 [pid 6157] <... write resumed>) = 524288 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6156] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6156] chdir("./file1") = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6156] chdir("./file0") = 0 [pid 6156] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5832] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6156] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5833] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 6157] munmap(0x7fd6d9800000, 138412032 [pid 6155] <... ioctl resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 6157] <... munmap resumed>) = 0 [pid 6156] <... creat resumed>) = 5 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6156] sync( [pid 5833] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6155] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5832] unlink("./64/binderfs" [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 6155] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 81.746264][ T6156] loop1: detected capacity change from 0 to 1024 [ 81.775008][ T6155] loop2: detected capacity change from 0 to 1024 [pid 5833] unlink("./62/binderfs") = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5832] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] close(4 [pid 6157] <... ioctl resumed>) = 0 [pid 6156] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6157] close(3 [pid 6156] exit_group(0 [pid 6155] <... close resumed>) = 0 [pid 5833] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] <... close resumed>) = 0 [pid 6156] <... exit_group resumed>) = ? [pid 6155] mkdir("./file1", 0777 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] close(4 [pid 6156] +++ exited with 0 +++ [pid 6155] <... mkdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./62/file1", [pid 5832] newfstatat(AT_FDCWD, "./64/file1", [pid 6157] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] mkdir("./file1", 0777 [pid 6155] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6156, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6157] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5832] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 5832] newfstatat(4, "", [pid 6157] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 6157] <... mount resumed>) = 0 [pid 6155] <... mount resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6157] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] close(4 [pid 5830] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] chdir("./file1" [pid 5833] rmdir("./62/file1" [pid 5830] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6157] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] getdents64(3, [pid 5832] getdents64(4, [pid 5830] unlink("./62/binderfs" [pid 6157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6155] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 6157] chdir("./file0" [pid 6155] chdir("./file1" [pid 5833] close(3 [pid 5832] close(4 [pid 5830] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] rmdir("./62" [pid 6157] <... chdir resumed>) = 0 [pid 6155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... rmdir resumed>) = 0 [pid 5832] rmdir("./64/file1" [pid 6155] chdir("./file0" [pid 6157] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] mkdir("./63", 0777 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6157] <... openat resumed>) = 4 [pid 6157] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 6155] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6155] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] rmdir("./64" [pid 5833] close(3) = 0 [pid 5832] <... rmdir resumed>) = 0 [ 81.811378][ T6157] loop0: detected capacity change from 0 to 1024 [pid 6155] <... openat resumed>) = 4 [pid 5832] mkdir("./65", 0777 [pid 5830] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6155] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./62/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6157] <... creat resumed>) = 5 [pid 6155] <... creat resumed>) = 5 [pid 5832] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 4 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] newfstatat(4, "", [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6158 attached [pid 6157] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6158 [pid 6158] set_robust_list(0x555557df1660, 24) = 0 [pid 6158] chdir("./63") = 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6158] <... prctl resumed>) = 0 [pid 5830] getdents64(4, [pid 6158] setpgid(0, 0 [pid 6155] sync( [pid 5832] close(3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6158] <... setpgid resumed>) = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] getdents64(4, [pid 6158] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6158] write(3, "1000", 4 [pid 5832] <... close resumed>) = 0 [pid 5830] close(4 [pid 6158] <... write resumed>) = 4 [pid 5830] <... close resumed>) = 0 [pid 6158] close(3) = 0 [pid 5830] rmdir("./62/file1" [pid 6158] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6158] write(1, "executing program\n", 18) = 18 [pid 5830] <... rmdir resumed>) = 0 [pid 6158] memfd_create("syzkaller", 0) = 3 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6158] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] getdents64(3, ./strace-static-x86_64: Process 6159 attached [pid 6158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] set_robust_list(0x555557df1660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6159 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6159] <... set_robust_list resumed>) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./62" [pid 6159] chdir("./65" [pid 5830] <... rmdir resumed>) = 0 [pid 6159] <... chdir resumed>) = 0 [pid 5830] mkdir("./63", 0777 [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6157] <... sync resumed>) = 0 [pid 6155] <... sync resumed>) = 0 [pid 6159] <... prctl resumed>) = 0 [pid 6157] exit_group(0 [pid 6155] exit_group(0 [pid 5830] <... mkdir resumed>) = 0 [pid 6159] setpgid(0, 0 [pid 6155] <... exit_group resumed>) = ? [pid 6157] <... exit_group resumed>) = ? [pid 6158] <... write resumed>) = 524288 [pid 6159] <... setpgid resumed>) = 0 [pid 6157] +++ exited with 0 +++ [pid 6155] +++ exited with 0 +++ [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6155, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5831] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 3 [pid 6158] munmap(0x7fd6d9800000, 138412032 [pid 5831] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6158] <... munmap resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... ioctl resumed>) = 0 [pid 6159] <... openat resumed>) = 3 [pid 6158] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] newfstatat(3, "", [pid 5830] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] write(3, "1000", 4 [pid 6158] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... close resumed>) = 0 [pid 6159] <... write resumed>) = 4 [pid 5831] getdents64(3, [pid 6158] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6158] <... ioctl resumed>) = 0 [pid 5831] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6159] close(3) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 3 executing program [pid 6159] <... symlink resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./63/binderfs", ./strace-static-x86_64: Process 6160 attached [pid 5829] newfstatat(3, "", [pid 6159] write(1, "executing program\n", 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6160 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6160] set_robust_list(0x555557df1660, 24 [pid 6159] <... write resumed>) = 18 [pid 5831] unlink("./63/binderfs" [pid 5829] getdents64(3, [pid 6159] memfd_create("syzkaller", 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6160] <... set_robust_list resumed>) = 0 [pid 6159] <... memfd_create resumed>) = 3 [pid 5831] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6160] chdir("./63" [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] <... chdir resumed>) = 0 [pid 6159] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6160] <... prctl resumed>) = 0 [pid 5829] unlink("./63/binderfs" [pid 6160] setpgid(0, 0 [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6160] <... setpgid resumed>) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] write(3, "1000", 4) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 6160] close(3) = 0 [pid 6160] symlink("/dev/binderfs", "./binderfs" [pid 6158] close(3) = 0 [pid 6160] <... symlink resumed>) = 0 executing program [pid 6160] write(1, "executing program\n", 18 [pid 6158] close(4 [pid 5829] <... umount2 resumed>) = 0 [pid 6160] <... write resumed>) = 18 [pid 6158] <... close resumed>) = 0 [pid 6158] mkdir("./file1", 0777) = 0 [pid 5831] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] <... write resumed>) = 524288 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] memfd_create("syzkaller", 0 [pid 6158] <... mount resumed>) = 0 [pid 5829] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6160] <... memfd_create resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] newfstatat(AT_FDCWD, "./63/file1", [pid 6158] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6158] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6160] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6158] chdir("./file1" [pid 5829] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] munmap(0x7fd6d9800000, 138412032 [pid 6158] <... chdir resumed>) = 0 [pid 5831] getdents64(4, [pid 6159] <... munmap resumed>) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] close(4 [pid 6159] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6158] chdir("./file0" [pid 5831] <... close resumed>) = 0 [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6159] <... openat resumed>) = 4 [ 81.943540][ T6158] loop4: detected capacity change from 0 to 1024 [pid 5831] rmdir("./63/file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6158] <... chdir resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6158] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6158] <... openat resumed>) = 4 [pid 5829] getdents64(4, [pid 6158] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5831] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6160] <... write resumed>) = 524288 [pid 6159] <... ioctl resumed>) = 0 [pid 6158] <... creat resumed>) = 5 [pid 5831] <... close resumed>) = 0 [pid 6160] munmap(0x7fd6d9800000, 138412032 [pid 5829] close(4 [pid 6159] close(3 [pid 6158] sync( [pid 5831] rmdir("./63" [pid 5829] <... close resumed>) = 0 [pid 6160] <... munmap resumed>) = 0 [pid 6159] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6159] close(4 [pid 5831] mkdir("./64", 0777 [pid 5829] rmdir("./63/file1" [pid 6160] <... openat resumed>) = 4 [pid 6159] <... close resumed>) = 0 [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6159] mkdir("./file1", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6159] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] getdents64(3, [pid 6159] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6160] <... ioctl resumed>) = 0 [pid 6159] <... mount resumed>) = 0 [pid 6158] <... sync resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 6159] <... openat resumed>) = 3 [pid 6158] exit_group(0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./63" [pid 6159] chdir("./file1" [pid 6158] <... exit_group resumed>) = ? [pid 5831] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 6160] close(3 [pid 6159] <... chdir resumed>) = 0 [pid 5829] mkdir("./64", 0777 [pid 6160] <... close resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6160] close(4 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6160] <... close resumed>) = 0 [pid 6158] +++ exited with 0 +++ [pid 5829] <... openat resumed>) = 3 [pid 6160] mkdir("./file1", 0777 [pid 6159] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 6159] chdir("./file0" [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] <... close resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6160] <... mkdir resumed>) = 0 [pid 6159] <... chdir resumed>) = 0 [pid 5833] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... close resumed>) = 0 [pid 6159] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, ""./strace-static-x86_64: Process 6161 attached [pid 5833] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6161] set_robust_list(0x555557df1660, 24 [pid 5833] getdents64(3, [pid 6161] <... set_robust_list resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 82.000216][ T6159] loop3: detected capacity change from 0 to 1024 [ 82.030733][ T6160] loop1: detected capacity change from 0 to 1024 [pid 6161] chdir("./64") = 0 [pid 6159] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6161 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6159] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(AT_FDCWD, "./63/binderfs", ./strace-static-x86_64: Process 6162 attached [pid 6161] <... prctl resumed>) = 0 [pid 6160] <... mount resumed>) = 0 [pid 6159] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6162] set_robust_list(0x555557df1660, 24 [pid 6161] setpgid(0, 0 [pid 6160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6159] sync( [pid 5833] unlink("./63/binderfs" [pid 6162] <... set_robust_list resumed>) = 0 [pid 6161] <... setpgid resumed>) = 0 [pid 6160] <... openat resumed>) = 3 [pid 5833] <... unlink resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6162 [pid 6162] chdir("./64" [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] chdir("./file1" [pid 5833] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6160] <... chdir resumed>) = 0 [pid 6161] <... openat resumed>) = 3 [pid 6160] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6161] write(3, "1000", 4 [pid 6162] <... chdir resumed>) = 0 [pid 6161] <... write resumed>) = 4 [pid 6160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs" [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6162] setpgid(0, 0) = 0 [pid 6161] <... symlink resumed>) = 0 executing program [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] chdir("./file0" [pid 6162] <... openat resumed>) = 3 [pid 6161] write(1, "executing program\n", 18) = 18 [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] write(3, "1000", 4 [pid 6161] memfd_create("syzkaller", 0 [pid 6160] <... chdir resumed>) = 0 [pid 6159] <... sync resumed>) = 0 [pid 6162] <... write resumed>) = 4 [pid 6161] <... memfd_create resumed>) = 3 executing program [pid 6160] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6162] close(3 [pid 6159] exit_group(0 [pid 5833] newfstatat(AT_FDCWD, "./63/file1", [pid 6162] <... close resumed>) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs" [pid 6159] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6162] <... symlink resumed>) = 0 [pid 6162] write(1, "executing program\n", 18 [pid 6160] <... openat resumed>) = 4 [pid 6162] <... write resumed>) = 18 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6159] +++ exited with 0 +++ [pid 6162] <... mmap resumed>) = 0x7fd6d9800000 [pid 6161] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6160] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... openat resumed>) = 4 [pid 6162] <... write resumed>) = 524288 [pid 6161] <... write resumed>) = 524288 [pid 6160] <... creat resumed>) = 5 [pid 5833] newfstatat(4, "", [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6162] munmap(0x7fd6d9800000, 138412032 [pid 6161] munmap(0x7fd6d9800000, 138412032 [pid 6160] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6162] <... munmap resumed>) = 0 [pid 6161] <... munmap resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... restart_syscall resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6161] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6160] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 5833] getdents64(4, [pid 6161] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6160] exit_group(0 [pid 5833] close(4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] rmdir("./63/file1" [pid 5832] <... openat resumed>) = 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5833] getdents64(3, [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(3, [pid 5833] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... close resumed>) = 0 [pid 5832] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./63" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... rmdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5833] mkdir("./64", 0777 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6162] <... ioctl resumed>) = 0 [pid 6161] ioctl(4, LOOP_SET_FD, 3 [pid 6160] <... exit_group resumed>) = ? [pid 5832] unlink("./65/binderfs" [pid 6162] close(3 [pid 6160] +++ exited with 0 +++ [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 6162] <... close resumed>) = 0 [pid 5832] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] close(4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6162] <... close resumed>) = 0 [pid 6162] mkdir("./file1", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6162] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6162] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6161] <... ioctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] close(3 [pid 5832] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6161] close(3 [pid 5833] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6161] <... close resumed>) = 0 [pid 6161] close(4) = 0 [pid 6161] mkdir("./file1", 0777) = 0 [pid 6162] <... mount resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] newfstatat(AT_FDCWD, "./65/file1", [pid 5830] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6162] <... openat resumed>) = 3 [pid 6162] chdir("./file1" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6162] <... chdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6161] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6163 attached [pid 6162] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] newfstatat(4, "", [pid 5830] newfstatat(3, "", [pid 6163] set_robust_list(0x555557df1660, 24 [pid 6162] chdir("./file0" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5830] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6163 [pid 5832] getdents64(4, [ 82.174935][ T6162] loop0: detected capacity change from 0 to 1024 [ 82.182784][ T6161] loop2: detected capacity change from 0 to 1024 [pid 5830] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] <... set_robust_list resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6162] <... chdir resumed>) = 0 [pid 6161] <... mount resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./63/binderfs", [pid 5832] close(4 [pid 6163] chdir("./64" [pid 6161] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6161] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5830] unlink("./63/binderfs" [pid 6163] <... chdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6161] chdir("./file1" [pid 5832] rmdir("./65/file1" [pid 5830] <... unlink resumed>) = 0 [pid 6161] <... chdir resumed>) = 0 [pid 5830] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6161] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] <... openat resumed>) = 4 [pid 6161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] getdents64(3, [pid 6163] <... prctl resumed>) = 0 [pid 6161] chdir("./file0" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6161] <... chdir resumed>) = 0 [pid 6163] setpgid(0, 0 [pid 6162] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] close(3 [pid 5830] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] <... setpgid resumed>) = 0 [pid 6161] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... close resumed>) = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] <... creat resumed>) = 5 [pid 5832] rmdir("./65" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] <... openat resumed>) = 3 [pid 6162] sync( [pid 6161] <... openat resumed>) = 4 [pid 5832] <... rmdir resumed>) = 0 [pid 6163] write(3, "1000", 4 [pid 5832] mkdir("./66", 0777 [pid 5830] newfstatat(AT_FDCWD, "./63/file1", [pid 6163] <... write resumed>) = 4 [pid 6161] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... mkdir resumed>) = 0 [pid 6163] close(3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6163] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] umount2("./63/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... ioctl resumed>) = 0 [pid 6163] write(1, "executing program\n", 18 [pid 6162] <... sync resumed>) = 0 [pid 6161] <... creat resumed>) = 5 [pid 5832] close(3 [pid 5830] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6161] sync( [pid 6163] <... write resumed>) = 18 [pid 6162] exit_group(0 [pid 5830] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 6163] memfd_create("syzkaller", 0) = 3 [pid 6162] <... exit_group resumed>) = ? [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(4, "", [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6162] +++ exited with 0 +++ [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- ./strace-static-x86_64: Process 6164 attached [pid 5830] getdents64(4, [pid 6164] set_robust_list(0x555557df1660, 24 [pid 6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] <... sync resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6164 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6161] exit_group(0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6161] <... exit_group resumed>) = ? [pid 5830] close(4 [pid 6164] chdir("./66" [pid 6161] +++ exited with 0 +++ [pid 5830] <... close resumed>) = 0 [pid 6164] <... chdir resumed>) = 0 [pid 5830] rmdir("./63/file1" [pid 5829] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6164] <... prctl resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6164] setpgid(0, 0 [pid 5830] getdents64(3, [pid 6164] <... setpgid resumed>) = 0 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] getdents64(3, [pid 6164] <... openat resumed>) = 3 [pid 6164] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6164] <... write resumed>) = 4 [pid 6164] close(3 [pid 5830] close(3 [pid 5829] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] symlink("/dev/binderfs", "./binderfs" [pid 5830] rmdir("./63" [pid 6164] <... symlink resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./64/binderfs") = 0 executing program [pid 5829] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] write(1, "executing program\n", 18 [pid 6163] <... write resumed>) = 524288 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] mkdir("./64", 0777 [pid 6164] <... write resumed>) = 18 [pid 6163] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... mkdir resumed>) = 0 [pid 6164] memfd_create("syzkaller", 0 [pid 6163] <... munmap resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6164] <... memfd_create resumed>) = 3 [pid 5831] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6163] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6164] <... mmap resumed>) = 0x7fd6d9800000 [pid 6163] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6163] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./64/file1", [pid 5831] unlink("./64/binderfs" [pid 5830] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... close resumed>) = 0 [pid 6164] <... write resumed>) = 524288 [pid 6163] <... ioctl resumed>) = 0 [pid 5829] getdents64(4, [pid 6163] close(3 [pid 6164] munmap(0x7fd6d9800000, 138412032 [pid 6163] <... close resumed>) = 0 [pid 6163] close(4 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6163] <... close resumed>) = 0 ./strace-static-x86_64: Process 6165 attached [pid 6163] mkdir("./file1", 0777 [pid 5829] close(4) = 0 [pid 5829] rmdir("./64/file1" [pid 6163] <... mkdir resumed>) = 0 [pid 6164] <... munmap resumed>) = 0 [pid 6163] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... rmdir resumed>) = 0 [pid 6165] set_robust_list(0x555557df1660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6165 [pid 5829] getdents64(3, [pid 6165] <... set_robust_list resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6165] chdir("./64" [pid 5829] close(3) = 0 [pid 6165] <... chdir resumed>) = 0 [pid 5829] rmdir("./64" [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... rmdir resumed>) = 0 [pid 6165] <... prctl resumed>) = 0 [pid 6165] setpgid(0, 0 [pid 5829] mkdir("./65", 0777 [pid 6165] <... setpgid resumed>) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... umount2 resumed>) = 0 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6164] <... openat resumed>) = 4 [pid 5829] <... mkdir resumed>) = 0 [pid 6164] ioctl(4, LOOP_SET_FD, 3 [pid 6163] <... mount resumed>) = 0 [pid 6165] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6165] write(3, "1000", 4 [pid 5829] <... openat resumed>) = 3 [pid 6165] <... write resumed>) = 4 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6165] close(3) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs" [pid 5829] close(3 [pid 6165] <... symlink resumed>) = 0 [pid 6165] write(1, "executing program\n", 18) = 18 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 executing program [pid 6163] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] <... openat resumed>) = 3 [pid 5831] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] chdir("./file1"./strace-static-x86_64: Process 6166 attached ) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] newfstatat(AT_FDCWD, "./64/file1", [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6166 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6166] set_robust_list(0x555557df1660, 24 [pid 6163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] <... set_robust_list resumed>) = 0 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6163] chdir("./file0" [pid 6166] chdir("./65") = 0 [pid 6165] <... write resumed>) = 524288 [pid 6164] <... ioctl resumed>) = 0 [pid 6163] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] close(3 [pid 6163] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6165] munmap(0x7fd6d9800000, 138412032 [pid 6164] <... close resumed>) = 0 [pid 6165] <... munmap resumed>) = 0 [pid 6163] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6166] <... prctl resumed>) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6166] setpgid(0, 0 [pid 6165] <... openat resumed>) = 4 [pid 5831] getdents64(4, [pid 6166] <... setpgid resumed>) = 0 [ 82.339530][ T6163] loop4: detected capacity change from 0 to 1024 [ 82.371717][ T6164] loop3: detected capacity change from 0 to 1024 [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6165] <... ioctl resumed>) = 0 [pid 6164] close(4 [pid 6163] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6166] <... openat resumed>) = 3 [pid 6165] close(3 [pid 6164] <... close resumed>) = 0 [pid 6166] write(3, "1000", 4 [pid 6165] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 6165] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6166] <... write resumed>) = 4 [pid 6165] <... close resumed>) = 0 [pid 5831] close(4 [pid 6166] close(3 [pid 6165] mkdir("./file1", 0777 [pid 6166] <... close resumed>) = 0 [pid 6165] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6164] mkdir("./file1", 0777 [pid 6166] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6165] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6166] write(1, "executing program\n", 18 [pid 6164] <... mkdir resumed>) = 0 [pid 5831] rmdir("./64/file1" [pid 6166] <... write resumed>) = 18 [pid 6166] memfd_create("syzkaller", 0 [pid 6163] <... creat resumed>) = 5 [pid 6166] <... memfd_create resumed>) = 3 [pid 6164] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6163] sync( [pid 5831] <... rmdir resumed>) = 0 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] getdents64(3, [pid 6166] <... mmap resumed>) = 0x7fd6d9800000 [pid 6165] <... mount resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] close(3) = 0 [pid 6165] <... openat resumed>) = 3 [pid 5831] rmdir("./64" [pid 6165] chdir("./file1") = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... rmdir resumed>) = 0 [pid 6165] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] mkdir("./65", 0777 [pid 6166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6165] chdir("./file0" [pid 6164] <... mount resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... openat resumed>) = 3 [pid 6164] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6165] <... chdir resumed>) = 0 [pid 6164] chdir("./file1" [pid 5831] <... ioctl resumed>) = 0 [pid 6164] <... chdir resumed>) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] close(3 [pid 6165] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 82.404440][ T6165] loop1: detected capacity change from 0 to 1024 [pid 6165] <... openat resumed>) = 4 [pid 6166] <... write resumed>) = 524288 [pid 6164] chdir("./file0" [pid 6163] <... sync resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6166] munmap(0x7fd6d9800000, 138412032 [pid 6165] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6167 attached [pid 6166] <... munmap resumed>) = 0 [pid 6164] <... chdir resumed>) = 0 [pid 6164] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6163] exit_group(0 [pid 6166] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6163] <... exit_group resumed>) = ? [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6167 [pid 6166] <... openat resumed>) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3 [pid 6167] set_robust_list(0x555557df1660, 24 [pid 6164] <... openat resumed>) = 4 [pid 6163] +++ exited with 0 +++ [pid 6167] <... set_robust_list resumed>) = 0 [pid 6167] chdir("./65" [pid 6164] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6165] <... creat resumed>) = 5 [pid 5833] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6167] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6165] sync( [pid 5833] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./64/binderfs") = 0 [pid 5833] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] <... ioctl resumed>) = 0 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6164] <... creat resumed>) = 5 [pid 5833] <... umount2 resumed>) = 0 [pid 6164] sync( [pid 5833] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6166] close(3 [pid 5833] newfstatat(AT_FDCWD, "./64/file1", [pid 6167] <... prctl resumed>) = 0 [pid 6166] <... close resumed>) = 0 [pid 6167] setpgid(0, 0 [pid 6166] close(4) = 0 [pid 6167] <... setpgid resumed>) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6166] mkdir("./file1", 0777 [pid 5833] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] <... mkdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6167] write(3, "1000", 4) = 4 [pid 6166] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... openat resumed>) = 4 [pid 6167] close(3) = 0 [pid 5833] newfstatat(4, "", [pid 6165] <... sync resumed>) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6166] <... mount resumed>) = 0 [pid 6164] <... sync resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6167] <... symlink resumed>) = 0 [pid 6166] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6165] exit_group(0 [pid 6164] exit_group(0 [pid 5833] getdents64(4, [pid 6167] write(1, "executing program\n", 18executing program [pid 6166] <... openat resumed>) = 3 [pid 6165] <... exit_group resumed>) = ? [pid 6164] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6167] <... write resumed>) = 18 [pid 6166] chdir("./file1" [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 6165] +++ exited with 0 +++ [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./64/file1" [pid 6166] <... chdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [ 82.480328][ T6166] loop0: detected capacity change from 0 to 1024 [pid 5833] getdents64(3, [pid 6167] memfd_create("syzkaller", 0 [pid 6166] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6164] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6165, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6167] <... memfd_create resumed>) = 3 [pid 6166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6166] chdir("./file0" [pid 5833] close(3 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6167] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./64") = 0 [pid 5832] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] mkdir("./65", 0777 [pid 5832] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6166] <... chdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6166] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 6166] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] newfstatat(AT_FDCWD, "./66/binderfs", [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(3, [pid 5833] close(3 [pid 5832] unlink("./66/binderfs" [pid 6166] <... creat resumed>) = 5 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6167] <... write resumed>) = 524288 [pid 6166] sync( [pid 5833] <... close resumed>) = 0 [pid 5830] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... unlink resumed>) = 0 [pid 5832] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6167] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6168 attached [pid 5830] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6168] set_robust_list(0x555557df1660, 24 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6167] <... munmap resumed>) = 0 [pid 6168] <... set_robust_list resumed>) = 0 [pid 6166] <... sync resumed>) = 0 [pid 5830] unlink("./64/binderfs" [pid 6168] chdir("./65" [pid 6167] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6166] exit_group(0 [pid 5832] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6168] <... chdir resumed>) = 0 [pid 6167] <... openat resumed>) = 4 [pid 6166] <... exit_group resumed>) = ? [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6168 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... unlink resumed>) = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6167] ioctl(4, LOOP_SET_FD, 3 [pid 5830] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6168] <... prctl resumed>) = 0 [pid 6166] +++ exited with 0 +++ [pid 5832] newfstatat(AT_FDCWD, "./66/file1", [pid 6168] setpgid(0, 0) = 0 [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6167] <... ioctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6167] close(3 [pid 6168] write(3, "1000", 4 [pid 5832] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6168] <... write resumed>) = 4 [pid 6167] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6168] close(3 [pid 6167] close(4 [pid 5832] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(AT_FDCWD, "./64/file1", [pid 6168] <... close resumed>) = 0 [pid 6167] <... close resumed>) = 0 [pid 5829] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 4 [pid 6168] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] mkdir("./file1", 0777) = 0 [pid 6167] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6168] <... symlink resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5830] umount2("./64/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6168] write(1, "executing program\n", 18 [pid 5829] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./66/file1") = 0 executing program [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6168] <... write resumed>) = 18 [pid 5830] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6168] memfd_create("syzkaller", 0 [pid 5832] getdents64(3, [pid 5830] <... openat resumed>) = 4 [pid 5829] getdents64(3, [pid 6168] <... memfd_create resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6168] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] close(3 [pid 5830] getdents64(4, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] <... mount resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./66" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5830] getdents64(4, [pid 6167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6167] <... openat resumed>) = 3 [pid 5830] close(4 [pid 5829] unlink("./65/binderfs" [pid 5830] <... close resumed>) = 0 [pid 6167] chdir("./file1" [pid 5832] mkdir("./67", 0777 [pid 5829] <... unlink resumed>) = 0 [pid 5830] rmdir("./64/file1" [pid 5829] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6167] <... chdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... mkdir resumed>) = 0 [pid 5830] getdents64(3, [pid 6167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6167] chdir("./file0" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5830] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] rmdir("./64" [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6167] <... chdir resumed>) = 0 [pid 5832] close(3) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6168] <... write resumed>) = 524288 [pid 6167] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] mkdir("./65", 0777 [pid 5829] <... umount2 resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6168] munmap(0x7fd6d9800000, 138412032 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 82.597914][ T6167] loop2: detected capacity change from 0 to 1024 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x555557df1660, 24 [pid 6168] <... munmap resumed>) = 0 [pid 6167] <... openat resumed>) = 4 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6169 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] newfstatat(AT_FDCWD, "./65/file1", [pid 6169] <... set_robust_list resumed>) = 0 [pid 6169] chdir("./67") = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6167] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] close(3 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6169] <... prctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6169] setpgid(0, 0 [pid 5830] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 6169] <... setpgid resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6167] <... creat resumed>) = 5 [pid 6168] <... openat resumed>) = 4 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4 [pid 6168] ioctl(4, LOOP_SET_FD, 3 [pid 6167] sync( [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6170 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./65/file1") = 0 [pid 6169] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6170 attached [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3 [pid 5829] getdents64(3, [pid 6169] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6170] set_robust_list(0x555557df1660, 24 [pid 6169] symlink("/dev/binderfs", "./binderfs" [pid 5829] close(3 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6169] <... symlink resumed>) = 0 [pid 5829] <... close resumed>) = 0 executing program [pid 6170] chdir("./65" [pid 5829] rmdir("./65" [pid 6170] <... chdir resumed>) = 0 [pid 6169] write(1, "executing program\n", 18 [pid 5829] <... rmdir resumed>) = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] <... write resumed>) = 18 [pid 5829] mkdir("./66", 0777 [pid 6170] <... prctl resumed>) = 0 [pid 6169] memfd_create("syzkaller", 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6170] setpgid(0, 0 [pid 6169] <... memfd_create resumed>) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... openat resumed>) = 3 [pid 6169] <... mmap resumed>) = 0x7fd6d9800000 [pid 6170] <... setpgid resumed>) = 0 [pid 6168] <... ioctl resumed>) = 0 [pid 6168] close(3 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6170] <... openat resumed>) = 3 [pid 5829] <... ioctl resumed>) = 0 [pid 6168] <... close resumed>) = 0 [pid 6170] write(3, "1000", 4 [pid 6168] close(4 [pid 5829] close(3 [pid 6170] <... write resumed>) = 4 [pid 6168] <... close resumed>) = 0 [pid 6168] mkdir("./file1", 0777 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... close resumed>) = 0 [pid 6170] <... symlink resumed>) = 0 [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6168] <... mkdir resumed>) = 0 [pid 6167] <... sync resumed>) = 0 [pid 6170] write(1, "executing program\n", 18 [pid 6168] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, ""executing program [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6170] <... write resumed>) = 18 [pid 6167] exit_group(0./strace-static-x86_64: Process 6171 attached [pid 6170] memfd_create("syzkaller", 0 [pid 6167] <... exit_group resumed>) = ? [pid 6170] <... memfd_create resumed>) = 3 [pid 6171] set_robust_list(0x555557df1660, 24 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6169] <... write resumed>) = 524288 [pid 6167] +++ exited with 0 +++ [pid 6171] <... set_robust_list resumed>) = 0 [pid 6170] <... mmap resumed>) = 0x7fd6d9800000 [pid 6171] chdir("./66" [pid 6168] <... mount resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6171] <... chdir resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6171 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] <... openat resumed>) = 3 [pid 6171] <... prctl resumed>) = 0 [ 82.694591][ T6168] loop4: detected capacity change from 0 to 1024 [pid 6168] chdir("./file1" [pid 6171] setpgid(0, 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6171] <... setpgid resumed>) = 0 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6169] munmap(0x7fd6d9800000, 138412032 [pid 6168] <... chdir resumed>) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6169] <... munmap resumed>) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6171] <... openat resumed>) = 3 [pid 6170] <... write resumed>) = 524288 [pid 6168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] write(3, "1000", 4 [pid 6169] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6168] chdir("./file0" [pid 6171] <... write resumed>) = 4 [pid 6169] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] close(3 [pid 6169] ioctl(4, LOOP_SET_FD, 3 [pid 5831] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6171] <... close resumed>) = 0 [pid 6168] <... chdir resumed>) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs" [pid 6168] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6168] <... openat resumed>) = 4 [pid 5831] getdents64(3, [pid 6171] <... symlink resumed>) = 0 [pid 6170] munmap(0x7fd6d9800000, 138412032 [pid 6169] <... ioctl resumed>) = 0 [pid 6168] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6170] <... munmap resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6169] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6169] <... close resumed>) = 0 [pid 6171] write(1, "executing program\n", 18 [pid 6170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6169] close(4executing program [pid 5831] unlink("./65/binderfs" [pid 6170] <... openat resumed>) = 4 [pid 6169] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] <... write resumed>) = 18 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6169] mkdir("./file1", 0777 [pid 6168] <... creat resumed>) = 5 [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6168] sync( [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6169] <... mkdir resumed>) = 0 [pid 6169] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6170] <... ioctl resumed>) = 0 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6169] <... mount resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6169] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... openat resumed>) = 3 [pid 6170] close(3 [pid 6169] chdir("./file1" [pid 6171] <... write resumed>) = 524288 [pid 6170] <... close resumed>) = 0 [pid 6169] <... chdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./65/file1", [pid 6169] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6170] close(4 [pid 5831] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] <... close resumed>) = 0 [pid 6169] chdir("./file0" [pid 5831] <... openat resumed>) = 4 [pid 6171] munmap(0x7fd6d9800000, 138412032 [pid 6170] mkdir("./file1", 0777 [pid 6168] <... sync resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 6171] <... munmap resumed>) = 0 [pid 6169] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6170] <... mkdir resumed>) = 0 [pid 6169] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6168] exit_group(0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6170] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6168] <... exit_group resumed>) = ? [pid 5831] getdents64(4, [pid 6171] <... openat resumed>) = 4 [pid 6169] <... openat resumed>) = 4 [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [ 82.762482][ T6169] loop3: detected capacity change from 0 to 1024 [ 82.793984][ T6170] loop1: detected capacity change from 0 to 1024 [pid 6169] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6171] <... ioctl resumed>) = 0 [pid 6170] <... mount resumed>) = 0 [pid 6168] +++ exited with 0 +++ [pid 5831] getdents64(4, [pid 6171] close(3 [pid 6170] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6171] <... close resumed>) = 0 [pid 6170] <... openat resumed>) = 3 [pid 6169] sync( [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] close(4 [pid 6171] close(4 [pid 6170] chdir("./file1" [pid 5831] <... close resumed>) = 0 [pid 6171] <... close resumed>) = 0 [pid 6170] <... chdir resumed>) = 0 [pid 5831] rmdir("./65/file1" [pid 6171] mkdir("./file1", 0777 [pid 6170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... rmdir resumed>) = 0 [pid 6171] <... mkdir resumed>) = 0 [pid 6170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./65") = 0 [pid 5831] mkdir("./66", 0777 [pid 6170] chdir("./file0" [pid 5831] <... mkdir resumed>) = 0 [pid 6171] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6170] <... chdir resumed>) = 0 [pid 5833] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6170] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] <... openat resumed>) = 4 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 6170] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6171] <... mount resumed>) = 0 [pid 5833] getdents64(3, [pid 5831] close(3 [pid 6171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6171] <... openat resumed>) = 3 [pid 5833] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] chdir("./file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] <... chdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6171] chdir("./file0") = 0 [pid 6170] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6170] sync( [pid 6171] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] unlink("./65/binderfs") = 0 [pid 6171] <... openat resumed>) = 4 [pid 6169] <... sync resumed>) = 0 [pid 5833] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6169] exit_group(0 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6172 attached [pid 6169] <... exit_group resumed>) = ? [ 82.826696][ T6171] loop0: detected capacity change from 0 to 1024 [pid 6171] <... creat resumed>) = 5 [pid 6169] +++ exited with 0 +++ [pid 6172] set_robust_list(0x555557df1660, 24 [pid 6170] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6172 [pid 6171] sync( [pid 6170] exit_group(0 [pid 5833] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6170] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./65/file1", [pid 6172] <... set_robust_list resumed>) = 0 [pid 6172] chdir("./66") = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6172] setpgid(0, 0) = 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6170] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6172] <... openat resumed>) = 3 [pid 5833] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6170, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] write(3, "1000", 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... write resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6172] close(3) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 6172] symlink("/dev/binderfs", "./binderfs" [pid 5832] newfstatat(3, "", [pid 6172] <... symlink resumed>) = 0 [pid 6171] <... sync resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 6171] exit_group(0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 executing program [pid 6172] write(1, "executing program\n", 18 [pid 5833] getdents64(4, [pid 5830] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] <... write resumed>) = 18 [pid 6171] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] memfd_create("syzkaller", 0 [pid 5833] getdents64(4, [pid 5832] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6172] <... memfd_create resumed>) = 3 [pid 6171] +++ exited with 0 +++ [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] close(4 [pid 5832] unlink("./67/binderfs" [pid 6172] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] rmdir("./65/file1" [pid 5832] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] getdents64(3, [pid 5830] getdents64(3, [pid 5832] <... umount2 resumed>) = 0 [pid 5832] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] <... write resumed>) = 524288 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6172] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(3 [pid 5832] newfstatat(AT_FDCWD, "./67/file1", [pid 5830] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] <... munmap resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] rmdir("./65" [pid 5832] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5829] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 5830] unlink("./65/binderfs" [pid 5829] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] mkdir("./66", 0777 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6172] <... ioctl resumed>) = 0 [pid 5832] close(4 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 6172] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5830] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6172] <... close resumed>) = 0 [pid 5832] rmdir("./67/file1" [pid 5829] newfstatat(3, "", [pid 6172] close(4) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6172] mkdir("./file1", 0777) = 0 [pid 6172] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... ioctl resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] <... umount2 resumed>) = 0 [pid 5829] getdents64(3, [pid 5833] close(3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] rmdir("./67"./strace-static-x86_64: Process 6173 attached [pid 6172] <... mount resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6173] set_robust_list(0x555557df1660, 24 [pid 6172] chdir("./file1" [pid 5832] mkdir("./68", 0777 [pid 5830] newfstatat(AT_FDCWD, "./65/file1", [pid 6173] <... set_robust_list resumed>) = 0 [pid 6172] <... chdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6173 [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] chdir("./66" [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] unlink("./66/binderfs" [pid 6173] <... chdir resumed>) = 0 [pid 6172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 82.941328][ T6172] loop2: detected capacity change from 0 to 1024 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6172] chdir("./file0" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] umount2("./65/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 6173] <... prctl resumed>) = 0 [pid 6173] setpgid(0, 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] <... setpgid resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] close(3 [pid 6173] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... umount2 resumed>) = 0 [pid 6173] write(3, "1000", 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./65/file1" [pid 6173] <... write resumed>) = 4 [pid 6172] <... chdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] close(3 [pid 6172] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6173] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] symlink("/dev/binderfs", "./binderfs" [pid 5829] newfstatat(AT_FDCWD, "./66/file1", [pid 6173] <... symlink resumed>) = 0 [pid 5830] getdents64(3, executing program [pid 6173] write(1, "executing program\n", 18 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] <... write resumed>) = 18 [pid 6172] <... openat resumed>) = 4 [pid 5830] close(3 [pid 6173] memfd_create("syzkaller", 0 [pid 6172] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... close resumed>) = 0 ./strace-static-x86_64: Process 6174 attached [pid 6173] <... memfd_create resumed>) = 3 [pid 5830] rmdir("./65" [pid 5829] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6174 [pid 6173] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] set_robust_list(0x555557df1660, 24) = 0 [pid 6174] chdir("./68" [pid 5830] mkdir("./66", 0777) = 0 [pid 6174] <... chdir resumed>) = 0 [pid 6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6172] <... creat resumed>) = 5 [pid 5829] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... openat resumed>) = 4 [pid 6174] setpgid(0, 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(4, "", [pid 6174] <... setpgid resumed>) = 0 [pid 6172] sync( [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6174] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(4, [pid 6174] write(3, "1000", 4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6174] <... write resumed>) = 4 [pid 5829] close(4 [pid 6174] close(3 [pid 5829] <... close resumed>) = 0 [pid 6174] <... close resumed>) = 0 [pid 5829] rmdir("./66/file1" [pid 6174] symlink("/dev/binderfs", "./binderfs" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6174] <... symlink resumed>) = 0 [pid 6173] <... write resumed>) = 524288 executing program [pid 6172] <... sync resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6175 attached [pid 6174] write(1, "executing program\n", 18 [pid 6172] exit_group(0 [pid 5829] getdents64(3, [pid 6175] set_robust_list(0x555557df1660, 24 [pid 6174] <... write resumed>) = 18 [pid 6172] <... exit_group resumed>) = ? [pid 6175] <... set_robust_list resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6175] chdir("./66" [pid 6174] memfd_create("syzkaller", 0 [pid 6173] munmap(0x7fd6d9800000, 138412032 [pid 5829] close(3 [pid 6175] <... chdir resumed>) = 0 [pid 6174] <... memfd_create resumed>) = 3 [pid 6173] <... munmap resumed>) = 0 [pid 6172] +++ exited with 0 +++ [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6175 [pid 5829] <... close resumed>) = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6173] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6174] <... mmap resumed>) = 0x7fd6d9800000 [pid 6173] <... openat resumed>) = 4 [pid 6175] <... prctl resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] rmdir("./66" [pid 6175] setpgid(0, 0 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6173] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... setpgid resumed>) = 0 [pid 6174] <... write resumed>) = 524288 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6174] munmap(0x7fd6d9800000, 138412032 [pid 6173] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] mkdir("./67", 0777 [pid 6175] <... openat resumed>) = 3 [pid 6174] <... munmap resumed>) = 0 [pid 6173] close(3 [pid 5831] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6175] write(3, "1000", 4 [pid 6174] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6173] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... mkdir resumed>) = 0 [pid 6175] <... write resumed>) = 4 [pid 6174] <... openat resumed>) = 4 [pid 6173] close(4 [pid 5831] newfstatat(3, "", [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6175] close(3 [pid 6173] <... close resumed>) = 0 [pid 6175] <... close resumed>) = 0 [pid 6173] mkdir("./file1", 0777 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6173] <... mkdir resumed>) = 0 [pid 6175] <... symlink resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6175] write(1, "executing program\n", 18 [pid 6174] <... ioctl resumed>) = 0 [pid 6173] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] getdents64(3, executing program [pid 6174] close(3 [pid 5829] <... ioctl resumed>) = 0 [pid 6174] <... close resumed>) = 0 [pid 6175] <... write resumed>) = 18 [pid 6173] <... mount resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6174] close(4 [pid 5829] close(3 [pid 6175] memfd_create("syzkaller", 0 [pid 6174] <... close resumed>) = 0 [pid 6173] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6175] <... memfd_create resumed>) = 3 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6174] mkdir("./file1", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6175] <... mmap resumed>) = 0x7fd6d9800000 [pid 6173] <... openat resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6174] <... mkdir resumed>) = 0 [pid 6173] chdir("./file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6173] <... chdir resumed>) = 0 [pid 6173] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6174] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] unlink("./66/binderfs" [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6176 attached [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] chdir("./file0" [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6176 [ 83.073586][ T6173] loop4: detected capacity change from 0 to 1024 [ 83.083663][ T6174] loop3: detected capacity change from 0 to 1024 [pid 6176] set_robust_list(0x555557df1660, 24) = 0 [pid 6176] chdir("./67") = 0 [pid 6173] <... chdir resumed>) = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 executing program [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6173] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6176] <... openat resumed>) = 3 [pid 6176] write(3, "1000", 4) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 6176] close(3) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6176] write(1, "executing program\n", 18 [pid 6173] <... openat resumed>) = 4 [pid 6176] <... write resumed>) = 18 [pid 6176] memfd_create("syzkaller", 0 [pid 6174] <... mount resumed>) = 0 [pid 6175] <... write resumed>) = 524288 [pid 6174] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6173] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6176] <... memfd_create resumed>) = 3 [pid 6175] munmap(0x7fd6d9800000, 138412032 [pid 6174] <... openat resumed>) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6175] <... munmap resumed>) = 0 [pid 6174] chdir("./file1" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] <... chdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./66/file1", [pid 6174] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6176] <... mmap resumed>) = 0x7fd6d9800000 [pid 6175] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6175] <... openat resumed>) = 4 [pid 6174] chdir("./file0" [pid 5831] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6175] ioctl(4, LOOP_SET_FD, 3 [pid 6174] <... chdir resumed>) = 0 [pid 6173] <... creat resumed>) = 5 [pid 5831] <... openat resumed>) = 4 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6174] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6173] sync( [pid 5831] newfstatat(4, "", [pid 6175] <... ioctl resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6175] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6175] <... close resumed>) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6175] close(4 [pid 5831] close(4) = 0 [pid 5831] rmdir("./66/file1") = 0 [pid 6175] <... close resumed>) = 0 [pid 6175] mkdir("./file1", 0777) = 0 [pid 6174] <... openat resumed>) = 4 [pid 6176] <... write resumed>) = 524288 [pid 5831] getdents64(3, [pid 6174] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6175] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] close(3) = 0 [pid 5831] rmdir("./66" [pid 6174] <... creat resumed>) = 5 [pid 6174] sync( [pid 6176] munmap(0x7fd6d9800000, 138412032 [pid 6175] <... mount resumed>) = 0 [pid 6176] <... munmap resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6175] chdir("./file1") = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6175] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 83.148635][ T6175] loop1: detected capacity change from 0 to 1024 [pid 6176] ioctl(4, LOOP_SET_FD, 3 [pid 6175] chdir("./file0") = 0 [pid 6175] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6175] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6176] <... ioctl resumed>) = 0 [pid 6175] <... creat resumed>) = 5 [pid 5831] <... rmdir resumed>) = 0 [pid 6175] sync( [pid 6176] close(3) = 0 [pid 5831] mkdir("./67", 0777 [pid 6176] close(4) = 0 [pid 6176] mkdir("./file1", 0777) = 0 [pid 6175] <... sync resumed>) = 0 [pid 6174] <... sync resumed>) = 0 [pid 6173] <... sync resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6175] exit_group(0) = ? [pid 6176] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6175] +++ exited with 0 +++ [pid 6174] exit_group(0 [pid 6173] exit_group(0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6174] <... exit_group resumed>) = ? [pid 6173] <... exit_group resumed>) = ? [pid 5831] <... openat resumed>) = 3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6174] +++ exited with 0 +++ [pid 6173] +++ exited with 0 +++ [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6176] <... mount resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6174, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] <... ioctl resumed>) = 0 [pid 6176] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6176] <... openat resumed>) = 3 [pid 5831] close(3 [pid 6176] chdir("./file1" [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6176] <... chdir resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [ 83.190749][ T6176] loop0: detected capacity change from 0 to 1024 [pid 5832] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6177 attached [pid 6176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] getdents64(3, [pid 5830] <... openat resumed>) = 3 [pid 6177] set_robust_list(0x555557df1660, 24 [pid 6176] chdir("./file0" [pid 5833] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6177 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] newfstatat(3, "", [pid 6177] <... set_robust_list resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6177] chdir("./67" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6177] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(3, [pid 6177] <... prctl resumed>) = 0 [pid 6177] setpgid(0, 0) = 0 [pid 6176] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6176] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] newfstatat(3, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] unlink("./68/binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6177] <... openat resumed>) = 3 [pid 6176] <... openat resumed>) = 4 [pid 5833] getdents64(3, [pid 5832] <... unlink resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6177] write(3, "1000", 4 [pid 6176] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6177] <... write resumed>) = 4 [pid 5833] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6177] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6177] <... close resumed>) = 0 [pid 5833] unlink("./66/binderfs" [pid 6177] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... unlink resumed>) = 0 [pid 6177] <... symlink resumed>) = 0 [pid 6176] <... creat resumed>) = 5 [pid 5833] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6177] write(1, "executing program\n", 18 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6177] <... write resumed>) = 18 [pid 6176] sync( [pid 6177] memfd_create("syzkaller", 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] unlink("./66/binderfs" [pid 6177] <... memfd_create resumed>) = 3 [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6177] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./66/file1", [pid 5832] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(AT_FDCWD, "./68/file1", [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] getdents64(4, [pid 5832] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5832] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] rmdir("./66/file1" [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 6177] <... write resumed>) = 524288 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./66" [pid 5830] newfstatat(AT_FDCWD, "./66/file1", [pid 6177] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5833] mkdir("./67", 0777 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6177] <... munmap resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6177] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] getdents64(4, [pid 6177] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 6177] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... close resumed>) = 0 [ 83.291483][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 83.291500][ T29] audit: type=1800 audit(1730647682.927:339): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] rmdir("./68/file1" [pid 5830] umount2("./66/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5833] close(3 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./66/file1" [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(3, [pid 6176] <... sync resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6176] exit_group(0 [pid 5832] close(3 [pid 6176] <... exit_group resumed>) = ? [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] close(3) = 0 [pid 5830] rmdir("./66") = 0 [pid 5830] mkdir("./67", 0777 [pid 6176] +++ exited with 0 +++ [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6178 [pid 5832] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6178 attached [pid 5832] rmdir("./68" [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6176, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] <... close resumed>) = 0 [pid 5832] mkdir("./69", 0777 [pid 5829] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6178] set_robust_list(0x555557df1660, 24 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] <... set_robust_list resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 6178] chdir("./67" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6178] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6178] <... prctl resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 6178] setpgid(0, 0 [pid 5832] close(3 [pid 5829] getdents64(3, [pid 6178] <... setpgid resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] unlink("./67/binderfs"./strace-static-x86_64: Process 6179 attached [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... close resumed>) = 0 [pid 6178] <... openat resumed>) = 3 [pid 6177] <... ioctl resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6179] set_robust_list(0x555557df1660, 24 [pid 5829] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6180 attached [pid 6179] <... set_robust_list resumed>) = 0 [pid 6177] close(3 [pid 6178] write(3, "1000", 4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6179 [pid 5829] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6180] set_robust_list(0x555557df1660, 24 [pid 6179] chdir("./67" [pid 6178] <... write resumed>) = 4 [pid 6177] <... close resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6180 [pid 6180] <... set_robust_list resumed>) = 0 [pid 6179] <... chdir resumed>) = 0 [pid 6178] close(3 [pid 6177] close(4 [pid 6180] chdir("./69" [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6178] <... close resumed>) = 0 [pid 6177] <... close resumed>) = 0 [pid 6180] <... chdir resumed>) = 0 [pid 6179] <... prctl resumed>) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs" [pid 6177] mkdir("./file1", 0777 [pid 5829] <... umount2 resumed>) = 0 [pid 6180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6179] setpgid(0, 0 [pid 6180] <... prctl resumed>) = 0 [pid 6179] <... setpgid resumed>) = 0 [pid 6178] <... symlink resumed>) = 0 [pid 6180] setpgid(0, 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6177] <... mkdir resumed>) = 0 [pid 6180] <... setpgid resumed>) = 0 [pid 6178] write(1, "executing program\n", 18 [pid 6177] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6179] <... openat resumed>) = 3 [pid 6178] <... write resumed>) = 18 executing program [pid 6180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6179] write(3, "1000", 4 [pid 6178] memfd_create("syzkaller", 0 [pid 6177] <... mount resumed>) = 0 [pid 5829] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6178] <... memfd_create resumed>) = 3 [pid 6177] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6180] <... openat resumed>) = 3 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 83.348360][ T6177] loop2: detected capacity change from 0 to 1024 [pid 6180] write(3, "1000", 4 [pid 6177] <... openat resumed>) = 3 [pid 6180] <... write resumed>) = 4 [pid 6179] <... write resumed>) = 4 [pid 6178] <... mmap resumed>) = 0x7fd6d9800000 [pid 6177] chdir("./file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6177] <... chdir resumed>) = 0 [pid 6179] close(3 [pid 5829] newfstatat(AT_FDCWD, "./67/file1", [pid 6179] <... close resumed>) = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6180] close(3 [pid 6179] <... symlink resumed>) = 0 [pid 6178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6180] <... close resumed>) = 0 [pid 6177] chdir("./file0" [pid 6180] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6179] write(1, "executing program\n", 18executing program [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] write(1, "executing program\n", 18 [pid 6179] <... write resumed>) = 18 [pid 5829] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6180] <... write resumed>) = 18 [pid 6179] memfd_create("syzkaller", 0 [pid 6177] <... chdir resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 6180] memfd_create("syzkaller", 0 [pid 6179] <... memfd_create resumed>) = 3 [pid 6177] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] newfstatat(4, "", [pid 6180] <... memfd_create resumed>) = 3 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6179] <... mmap resumed>) = 0x7fd6d9800000 [pid 6177] <... openat resumed>) = 4 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./67/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... close resumed>) = 0 [pid 6180] <... mmap resumed>) = 0x7fd6d9800000 [pid 6178] <... write resumed>) = 524288 [pid 6177] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] rmdir("./67") = 0 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6179] <... write resumed>) = 524288 [pid 5829] mkdir("./68", 0777) = 0 [pid 6178] munmap(0x7fd6d9800000, 138412032 [pid 6177] <... creat resumed>) = 5 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6177] sync( [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [ 83.446476][ T29] audit: type=1800 audit(1730647683.087:340): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 6178] <... munmap resumed>) = 0 [pid 5829] close(3 [pid 6180] <... write resumed>) = 524288 [pid 6178] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6178] ioctl(4, LOOP_SET_FD, 3 [pid 6179] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... close resumed>) = 0 [pid 6179] <... munmap resumed>) = 0 [pid 6180] munmap(0x7fd6d9800000, 138412032 [pid 6178] <... ioctl resumed>) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6179] ioctl(4, LOOP_SET_FD, 3 [pid 6180] <... munmap resumed>) = 0 [pid 6178] close(3 [pid 6180] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6178] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6178] close(4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6181 [pid 6179] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6181 attached [pid 6180] <... openat resumed>) = 4 [pid 6178] <... close resumed>) = 0 [pid 6177] <... sync resumed>) = 0 [pid 6178] mkdir("./file1", 0777 [pid 6177] exit_group(0 [pid 6181] set_robust_list(0x555557df1660, 24 [pid 6179] close(3 [pid 6177] <... exit_group resumed>) = ? [pid 6178] <... mkdir resumed>) = 0 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 6179] <... close resumed>) = 0 [pid 6181] chdir("./68" [pid 6178] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6177] +++ exited with 0 +++ [pid 6181] <... chdir resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6177, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6181] <... prctl resumed>) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6179] close(4 [pid 6181] <... openat resumed>) = 3 [pid 6179] <... close resumed>) = 0 [pid 6181] write(3, "1000", 4 [pid 6179] mkdir("./file1", 0777) = 0 [pid 6181] <... write resumed>) = 4 [pid 6180] <... ioctl resumed>) = 0 [pid 6178] <... mount resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6181] close(3 [pid 6180] close(3 [pid 6179] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6181] <... close resumed>) = 0 [pid 6180] <... close resumed>) = 0 [pid 6178] <... openat resumed>) = 3 [pid 6181] symlink("/dev/binderfs", "./binderfs" [pid 6180] close(4 [pid 6181] <... symlink resumed>) = 0 [pid 6180] <... close resumed>) = 0 [pid 6179] <... mount resumed>) = 0 [pid 6178] chdir("./file1" [pid 5831] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6179] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6178] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6180] mkdir("./file1", 0777 [pid 5831] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6181] write(1, "executing program\n", 18 [pid 6180] <... mkdir resumed>) = 0 [pid 6178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 3 executing program [pid 6179] <... openat resumed>) = 3 [pid 6178] chdir("./file0" [pid 5831] newfstatat(3, "", [pid 6179] chdir("./file1" [pid 6181] <... write resumed>) = 18 [pid 6181] memfd_create("syzkaller", 0 [pid 6179] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] getdents64(3, [pid 6181] <... memfd_create resumed>) = 3 [ 83.491940][ T6178] loop4: detected capacity change from 0 to 1024 [ 83.502543][ T6179] loop1: detected capacity change from 0 to 1024 [ 83.531214][ T6180] loop3: detected capacity change from 0 to 1024 [pid 6180] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6179] chdir("./file0" [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] <... chdir resumed>) = 0 [pid 6178] <... chdir resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./67/binderfs" [pid 6179] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6178] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... unlink resumed>) = 0 [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6179] <... openat resumed>) = 4 [pid 6178] <... openat resumed>) = 4 [pid 5831] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] <... write resumed>) = 524288 [pid 6180] <... mount resumed>) = 0 [pid 6179] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6178] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6181] munmap(0x7fd6d9800000, 138412032 [pid 6180] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6181] <... munmap resumed>) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6180] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = 0 [pid 6181] <... openat resumed>) = 4 [pid 6180] chdir("./file1" [pid 5831] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] ioctl(4, LOOP_SET_FD, 3 [pid 6180] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] <... creat resumed>) = 5 [pid 6178] <... creat resumed>) = 5 [pid 6181] <... ioctl resumed>) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6179] sync( [pid 6178] sync( [pid 5831] newfstatat(AT_FDCWD, "./67/file1", [pid 6181] close(3 [pid 6180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6181] <... close resumed>) = 0 [pid 6180] chdir("./file0" [pid 5831] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] close(4 [pid 6180] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] <... close resumed>) = 0 [ 83.582710][ T29] audit: type=1800 audit(1730647683.217:341): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 83.603157][ T29] audit: type=1800 audit(1730647683.217:342): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [ 83.626258][ T6181] loop0: detected capacity change from 0 to 1024 [pid 6180] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] mkdir("./file1", 0777 [pid 6180] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6181] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./67/file1") = 0 [pid 5831] getdents64(3, [pid 6181] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6180] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6180] sync( [pid 5831] close(3) = 0 [pid 5831] rmdir("./67") = 0 [pid 6181] <... mount resumed>) = 0 [pid 6181] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6178] <... sync resumed>) = 0 [pid 5831] mkdir("./68", 0777 [pid 6181] chdir("./file1" [pid 6179] <... sync resumed>) = 0 [pid 6178] exit_group(0 [pid 5831] <... mkdir resumed>) = 0 [pid 6178] <... exit_group resumed>) = ? [pid 6181] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 6181] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6181] chdir("./file0" [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3) = 0 [pid 6181] <... chdir resumed>) = 0 [pid 6180] <... sync resumed>) = 0 [pid 6179] exit_group(0 [pid 6178] +++ exited with 0 +++ [pid 6181] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6180] exit_group(0 [pid 6179] <... exit_group resumed>) = ? [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6181] <... openat resumed>) = 4 [pid 6180] <... exit_group resumed>) = ? [pid 6179] +++ exited with 0 +++ [ 83.640525][ T29] audit: type=1800 audit(1730647683.277:343): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 6181] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6182 ./strace-static-x86_64: Process 6182 attached [pid 6180] +++ exited with 0 +++ [pid 5833] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] set_robust_list(0x555557df1660, 24 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6182] <... set_robust_list resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6180, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] chdir("./68" [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... openat resumed>) = 3 [pid 6182] <... prctl resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 6182] setpgid(0, 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] <... setpgid resumed>) = 0 [pid 5830] getdents64(3, [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] <... creat resumed>) = 5 [pid 5833] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] <... openat resumed>) = 3 [pid 6181] sync( [pid 5833] <... openat resumed>) = 3 [pid 5830] newfstatat(AT_FDCWD, "./67/binderfs", [pid 5833] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] write(3, "1000", 4 [pid 5830] unlink("./67/binderfs" [pid 6182] <... write resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 6182] close(3 [pid 5830] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] <... close resumed>) = 0 [pid 5833] getdents64(3, [pid 6182] symlink("/dev/binderfs", "./binderfs" [pid 6181] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6182] <... symlink resumed>) = 0 [pid 6181] exit_group(0 [pid 5833] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6181] <... exit_group resumed>) = ? [pid 5833] newfstatat(AT_FDCWD, "./67/binderfs", executing program [pid 6182] write(1, "executing program\n", 18 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] <... write resumed>) = 18 [pid 5833] unlink("./67/binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] memfd_create("syzkaller", 0 [pid 5832] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./67/file1", [pid 6182] <... memfd_create resumed>) = 3 [pid 6181] +++ exited with 0 +++ [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5830] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(AT_FDCWD, "./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5833] umount2("./67/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(3, [pid 5830] newfstatat(4, "", [pid 5833] <... openat resumed>) = 4 [pid 5829] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.702006][ T29] audit: type=1800 audit(1730647683.337:344): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] <... write resumed>) = 524288 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6182] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(4, [pid 5829] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5832] unlink("./69/binderfs" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] rmdir("./67/file1" [pid 5830] close(4 [pid 5829] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] <... munmap resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] rmdir("./67/file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] <... openat resumed>) = 4 [pid 5833] getdents64(3, [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5833] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] unlink("./68/binderfs" [pid 5833] rmdir("./67") = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] mkdir("./68", 0777 [pid 5829] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6182] <... ioctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] getdents64(3, [pid 5829] <... umount2 resumed>) = 0 [pid 6182] close(3 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 5833] close(3 [pid 5832] newfstatat(AT_FDCWD, "./69/file1", [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] rmdir("./67") = 0 [pid 6182] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] close(4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] mkdir("./68", 0777) = 0 [pid 6182] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] newfstatat(AT_FDCWD, "./68/file1", [pid 6182] mkdir("./file1", 0777 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5832] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6182] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./69/file1" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6183] set_robust_list(0x555557df1660, 24) = 0 [pid 6182] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6183] chdir("./68" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6183 [pid 5832] getdents64(3, [pid 5830] close(3 [pid 5829] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6183] <... chdir resumed>) = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] close(3 [pid 5830] <... close resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6183] write(3, "1000", 4) = 4 [pid 6183] close(3) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6183] write(1, "executing program\n", 18 [pid 5832] rmdir("./69" [pid 5829] getdents64(4, executing program [pid 6183] <... write resumed>) = 18 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [ 83.770588][ T6182] loop2: detected capacity change from 0 to 1024 [pid 6183] memfd_create("syzkaller", 0 [pid 6182] <... mount resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] getdents64(4, [pid 6182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] mkdir("./70", 0777 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6182] <... openat resumed>) = 3 [pid 5829] close(4./strace-static-x86_64: Process 6184 attached [pid 6182] chdir("./file1" [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6182] <... chdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] rmdir("./68/file1" [pid 6182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 6184] set_robust_list(0x555557df1660, 24 [pid 6183] <... memfd_create resumed>) = 3 [pid 6182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6184 [pid 5829] <... rmdir resumed>) = 0 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6182] chdir("./file0" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6184] chdir("./68" [pid 6183] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] getdents64(3, [pid 6184] <... chdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6182] <... chdir resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 6182] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] close(3 [pid 5832] close(3 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... close resumed>) = 0 [pid 6182] <... openat resumed>) = 4 [pid 6184] <... prctl resumed>) = 0 [pid 6184] setpgid(0, 0) = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6182] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... close resumed>) = 0 [pid 5829] rmdir("./68") = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] mkdir("./69", 0777./strace-static-x86_64: Process 6185 attached ) = 0 [pid 6184] <... openat resumed>) = 3 [pid 6184] write(3, "1000", 4 [pid 6185] set_robust_list(0x555557df1660, 24 [pid 6184] <... write resumed>) = 4 [pid 6185] <... set_robust_list resumed>) = 0 [pid 6184] close(3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6185] chdir("./70" [pid 6184] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6185] <... chdir resumed>) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6184] <... symlink resumed>) = 0 [pid 6182] <... creat resumed>) = 5 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6185] <... prctl resumed>) = 0 executing program [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6185 [pid 6185] setpgid(0, 0 [pid 6184] write(1, "executing program\n", 18 [pid 6182] sync( [pid 5829] <... ioctl resumed>) = 0 [pid 6185] <... setpgid resumed>) = 0 [pid 6184] <... write resumed>) = 18 [pid 5829] close(3 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6184] memfd_create("syzkaller", 0 [pid 6183] <... write resumed>) = 524288 [pid 6185] <... openat resumed>) = 3 [pid 6184] <... memfd_create resumed>) = 3 [pid 6183] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... close resumed>) = 0 [pid 6185] write(3, "1000", 4 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6183] <... munmap resumed>) = 0 [pid 6185] <... write resumed>) = 4 [pid 6184] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6186 attached [pid 6183] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 83.864686][ T29] audit: type=1800 audit(1730647683.507:345): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 6186] set_robust_list(0x555557df1660, 24) = 0 executing program [pid 6185] write(1, "executing program\n", 18 [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6182] <... sync resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6186 [pid 6186] chdir("./69" [pid 6185] <... write resumed>) = 18 [pid 6182] exit_group(0 [pid 6186] <... chdir resumed>) = 0 [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6182] <... exit_group resumed>) = ? [pid 6186] <... prctl resumed>) = 0 [pid 6186] setpgid(0, 0 [pid 6185] memfd_create("syzkaller", 0 [pid 6182] +++ exited with 0 +++ [pid 6186] <... setpgid resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6185] <... memfd_create resumed>) = 3 [pid 6184] <... write resumed>) = 524288 [pid 6183] <... ioctl resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6186] <... openat resumed>) = 3 [pid 6185] <... mmap resumed>) = 0x7fd6d9800000 [pid 6184] munmap(0x7fd6d9800000, 138412032 [pid 6183] close(3 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6186] write(3, "1000", 4 [pid 6183] <... close resumed>) = 0 [pid 6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6184] <... munmap resumed>) = 0 [pid 6183] close(4 [pid 6186] <... write resumed>) = 4 [pid 6183] <... close resumed>) = 0 [pid 6186] close(3 [pid 5831] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6183] mkdir("./file1", 0777 [pid 6186] <... close resumed>) = 0 [pid 6186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6183] <... mkdir resumed>) = 0 [pid 6186] write(1, "executing program\n", 18 [pid 6184] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 6186] <... write resumed>) = 18 [pid 6184] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] memfd_create("syzkaller", 0 [pid 6184] ioctl(4, LOOP_SET_FD, 3 [pid 5831] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6185] <... write resumed>) = 524288 [pid 5831] <... openat resumed>) = 3 [pid 6185] munmap(0x7fd6d9800000, 138412032 [pid 6186] <... memfd_create resumed>) = 3 [pid 6184] <... ioctl resumed>) = 0 [pid 6183] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] newfstatat(3, "", [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6184] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6186] <... mmap resumed>) = 0x7fd6d9800000 [pid 6184] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 6185] <... munmap resumed>) = 0 [pid 6184] close(4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6185] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] <... openat resumed>) = 4 [pid 6185] ioctl(4, LOOP_SET_FD, 3 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6184] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6184] mkdir("./file1", 0777 [pid 5831] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6185] <... ioctl resumed>) = 0 [pid 6186] <... write resumed>) = 524288 [pid 6185] close(3 [pid 6184] <... mkdir resumed>) = 0 [pid 6183] <... mount resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6186] munmap(0x7fd6d9800000, 138412032 [pid 6185] <... close resumed>) = 0 [pid 6184] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] unlink("./68/binderfs" [pid 6185] close(4 [pid 5831] <... unlink resumed>) = 0 [pid 6185] <... close resumed>) = 0 [pid 6185] mkdir("./file1", 0777 [pid 6183] <... openat resumed>) = 3 [pid 5831] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] <... mkdir resumed>) = 0 [pid 6185] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6184] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6186] <... munmap resumed>) = 0 [pid 6184] <... openat resumed>) = 3 [pid 6184] chdir("./file1" [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6184] <... chdir resumed>) = 0 [pid 6183] chdir("./file1" [pid 6186] <... openat resumed>) = 4 [pid 6185] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6183] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6186] ioctl(4, LOOP_SET_FD, 3 [pid 6184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 83.930896][ T6183] loop4: detected capacity change from 0 to 1024 [ 83.951233][ T6184] loop1: detected capacity change from 0 to 1024 [ 83.973681][ T6185] loop3: detected capacity change from 0 to 1024 [pid 6183] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6185] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] <... openat resumed>) = 3 [pid 6185] chdir("./file1") = 0 [pid 5831] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6185] chdir("./file0" [pid 5831] newfstatat(AT_FDCWD, "./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6185] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", [pid 6186] <... ioctl resumed>) = 0 [pid 6185] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6184] chdir("./file0" [pid 6183] chdir("./file0" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6186] close(3) = 0 [pid 6185] <... openat resumed>) = 4 [pid 5831] getdents64(4, [pid 6186] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6185] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] close(4) = 0 [pid 5831] rmdir("./68/file1") = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./68") = 0 [pid 6185] <... creat resumed>) = 5 [pid 5831] mkdir("./69", 0777 [pid 6185] sync( [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6186] <... close resumed>) = 0 [pid 6184] <... chdir resumed>) = 0 [pid 6183] <... chdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 6183] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6186] mkdir("./file1", 0777 [pid 6184] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6183] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 6184] <... openat resumed>) = 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6186] <... mkdir resumed>) = 0 [pid 6184] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6187 attached [pid 6187] set_robust_list(0x555557df1660, 24) = 0 [pid 6187] chdir("./69" [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6187 [pid 6187] <... chdir resumed>) = 0 [pid 6186] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6183] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6187] setpgid(0, 0) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6187] write(3, "1000", 4 [pid 6184] <... creat resumed>) = 5 [pid 6183] <... creat resumed>) = 5 [pid 6184] sync( [pid 6183] sync( [pid 6187] <... write resumed>) = 4 [pid 6187] close(3) = 0 [ 84.010207][ T6186] loop0: detected capacity change from 0 to 1024 [ 84.024296][ T29] audit: type=1800 audit(1730647683.667:346): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 6187] symlink("/dev/binderfs", "./binderfs" [pid 6186] <... mount resumed>) = 0 [pid 6187] <... symlink resumed>) = 0 [pid 6186] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6185] <... sync resumed>) = 0 [pid 6184] <... sync resumed>) = 0 [pid 6183] <... sync resumed>) = 0 [pid 6185] exit_group(0executing program [pid 6184] exit_group(0 [pid 6187] write(1, "executing program\n", 18 [pid 6185] <... exit_group resumed>) = ? [pid 6183] exit_group(0 [pid 6187] <... write resumed>) = 18 [pid 6185] +++ exited with 0 +++ [pid 6183] <... exit_group resumed>) = ? [pid 6187] memfd_create("syzkaller", 0 [pid 6184] <... exit_group resumed>) = ? [pid 6183] +++ exited with 0 +++ [pid 6184] +++ exited with 0 +++ [pid 6187] <... memfd_create resumed>) = 3 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6186] <... openat resumed>) = 3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6186] chdir("./file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] <... chdir resumed>) = 0 [pid 5832] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] <... write resumed>) = 524288 [ 84.088590][ T29] audit: type=1800 audit(1730647683.697:347): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6186] chdir("./file0" [pid 6187] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(3, "", [pid 6187] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6187] <... openat resumed>) = 4 [pid 5832] newfstatat(3, "", [pid 5830] getdents64(3, [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, [pid 5830] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5830] unlink("./68/binderfs" [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5832] unlink("./70/binderfs") = 0 [pid 5832] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./68/binderfs" [pid 6186] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6186] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6187] <... ioctl resumed>) = 0 [pid 6186] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6187] close(3) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6187] close(4 [pid 6186] <... creat resumed>) = 5 [pid 5833] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6186] sync( [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./68/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] mkdir("./file1", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./70/file1", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(AT_FDCWD, "./68/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6187] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6187] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5830] umount2("./68/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] <... mount resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5830] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] <... openat resumed>) = 3 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 4 [pid 6187] chdir("./file1" [pid 6186] <... sync resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5830] newfstatat(4, "", [pid 6187] <... chdir resumed>) = 0 [pid 6186] exit_group(0 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6186] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5830] getdents64(4, [pid 6187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] close(4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6187] chdir("./file0" [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5833] rmdir("./68/file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6187] <... chdir resumed>) = 0 [pid 6186] +++ exited with 0 +++ [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] close(4 [pid 6187] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] getdents64(3, [pid 5832] rmdir("./70/file1" [pid 5830] <... close resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6186, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6187] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./68/file1" [pid 6187] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] close(3 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 5833] rmdir("./68" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] close(3 [pid 5830] close(3 [pid 5829] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] <... creat resumed>) = 5 [pid 5833] mkdir("./69", 0777 [pid 5832] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] rmdir("./70" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./68" [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [ 84.120644][ T29] audit: type=1800 audit(1730647683.697:348): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [ 84.144985][ T6187] loop2: detected capacity change from 0 to 1024 [pid 5829] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... mkdir resumed>) = 0 [pid 6187] sync( [pid 5832] mkdir("./71", 0777 [pid 5830] mkdir("./69", 0777 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] getdents64(3, [pid 6187] <... sync resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6187] exit_group(0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6187] <... exit_group resumed>) = ? [pid 5833] close(3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... ioctl resumed>) = 0 [pid 5829] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] unlink("./69/binderfs" [pid 5833] <... close resumed>) = 0 [pid 5830] close(3 [pid 5829] <... unlink resumed>) = 0 [pid 5832] close(3 [pid 5829] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] +++ exited with 0 +++ [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6188 attached [pid 5830] <... close resumed>) = 0 [pid 6188] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6188 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6188] <... set_robust_list resumed>) = 0 [pid 6188] chdir("./69") = 0 [pid 5831] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6188] setpgid(0, 0 [pid 5831] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6188] <... setpgid resumed>) = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 3 [pid 6188] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 6188] write(3, "1000", 4) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6188] close(3 [pid 5831] getdents64(3, [pid 6188] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6188] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... close resumed>) = 0 [pid 5831] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6188] <... symlink resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6188] write(1, "executing program\n", 18executing program [pid 5831] newfstatat(AT_FDCWD, "./69/binderfs", ./strace-static-x86_64: Process 6190 attached ./strace-static-x86_64: Process 6189 attached [pid 6188] <... write resumed>) = 18 [pid 6190] set_robust_list(0x555557df1660, 24 [pid 6189] set_robust_list(0x555557df1660, 24 [pid 6188] memfd_create("syzkaller", 0 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6189] <... set_robust_list resumed>) = 0 [pid 6188] <... memfd_create resumed>) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6190] chdir("./69" [pid 6189] chdir("./71" [pid 6188] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6190] <... chdir resumed>) = 0 [pid 6189] <... chdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6189 [pid 5831] unlink("./69/binderfs" [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... unlink resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6190 [pid 6189] <... prctl resumed>) = 0 [pid 5831] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6189] setpgid(0, 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6190] <... prctl resumed>) = 0 [pid 6190] setpgid(0, 0 [pid 6189] <... setpgid resumed>) = 0 [pid 6190] <... setpgid resumed>) = 0 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6189] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] <... openat resumed>) = 3 [pid 6189] write(3, "1000", 4 [pid 5829] newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6189] <... write resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6189] close(3 [pid 6190] write(3, "1000", 4 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6190] <... write resumed>) = 4 [pid 6189] <... close resumed>) = 0 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 6190] close(3 [pid 6189] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 6190] <... close resumed>) = 0 [pid 6189] <... symlink resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./69/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6190] symlink("/dev/binderfs", "./binderfs" [pid 6189] write(1, "executing program\n", 18executing program [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(4, [pid 6190] <... symlink resumed>) = 0 [pid 6189] <... write resumed>) = 18 executing program [pid 5831] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6190] write(1, "executing program\n", 18 [pid 6189] memfd_create("syzkaller", 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6190] <... write resumed>) = 18 [pid 5831] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6190] memfd_create("syzkaller", 0 [pid 6189] <... memfd_create resumed>) = 3 [pid 5831] <... openat resumed>) = 4 [pid 5829] getdents64(4, [pid 6190] <... memfd_create resumed>) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6189] <... mmap resumed>) = 0x7fd6d9800000 [pid 6188] <... write resumed>) = 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] close(4 [pid 6190] <... mmap resumed>) = 0x7fd6d9800000 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./69/file1" [pid 6188] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] rmdir("./69/file1" [pid 6188] <... munmap resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./69") = 0 [pid 5829] mkdir("./70", 0777 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5831] close(3 [pid 6188] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] rmdir("./69" [pid 5829] <... openat resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] mkdir("./70", 0777 [pid 5829] <... ioctl resumed>) = 0 [pid 6189] <... write resumed>) = 524288 [pid 5831] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5829] close(3 [pid 6188] <... openat resumed>) = 4 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... close resumed>) = 0 [pid 6190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6189] munmap(0x7fd6d9800000, 138412032 [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... ioctl resumed>) = 0 [pid 6189] <... munmap resumed>) = 0 [pid 5831] close(3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6189] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6191 attached [pid 5831] <... close resumed>) = 0 [pid 6191] set_robust_list(0x555557df1660, 24 [pid 6190] <... write resumed>) = 524288 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6191 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6190] munmap(0x7fd6d9800000, 138412032./strace-static-x86_64: Process 6192 attached [pid 6191] chdir("./70" [pid 6190] <... munmap resumed>) = 0 [pid 6189] <... ioctl resumed>) = 0 [pid 6188] <... ioctl resumed>) = 0 [pid 6192] set_robust_list(0x555557df1660, 24 [pid 6191] <... chdir resumed>) = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6189] close(3 [pid 6188] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6192 [pid 6192] <... set_robust_list resumed>) = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] <... openat resumed>) = 4 [pid 6189] <... close resumed>) = 0 [pid 6188] <... close resumed>) = 0 [pid 6192] chdir("./70" [pid 6191] <... prctl resumed>) = 0 [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6189] close(4 [pid 6188] close(4 [pid 6191] setpgid(0, 0 [pid 6188] <... close resumed>) = 0 [pid 6191] <... setpgid resumed>) = 0 [pid 6189] <... close resumed>) = 0 [pid 6188] mkdir("./file1", 0777) = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6189] mkdir("./file1", 0777 [pid 6191] <... openat resumed>) = 3 [pid 6189] <... mkdir resumed>) = 0 [pid 6188] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6192] <... chdir resumed>) = 0 [pid 6191] write(3, "1000", 4 [pid 6189] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6191] <... write resumed>) = 4 [pid 6192] setpgid(0, 0 [pid 6191] close(3 [pid 6189] <... mount resumed>) = 0 [pid 6192] <... setpgid resumed>) = 0 [pid 6191] <... close resumed>) = 0 [pid 6189] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 6190] <... ioctl resumed>) = 0 [pid 6189] <... openat resumed>) = 3 [pid 6192] <... openat resumed>) = 3 [pid 6191] <... symlink resumed>) = 0 [pid 6189] chdir("./file1" [pid 6192] write(3, "1000", 4 [pid 6191] write(1, "executing program\n", 18 [pid 6190] close(3executing program [pid 6189] <... chdir resumed>) = 0 [pid 6192] <... write resumed>) = 4 [pid 6191] <... write resumed>) = 18 [pid 6190] <... close resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6188] <... mount resumed>) = 0 [pid 6192] close(3) = 0 [pid 6191] memfd_create("syzkaller", 0 [pid 6190] close(4 [pid 6189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6188] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6192] symlink("/dev/binderfs", "./binderfs" [pid 6191] <... memfd_create resumed>) = 3 [pid 6189] chdir("./file0" [pid 6188] <... openat resumed>) = 3 [pid 6190] <... close resumed>) = 0 [pid 6192] <... symlink resumed>) = 0 [pid 6190] mkdir("./file1", 0777 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 84.322119][ T6188] loop4: detected capacity change from 0 to 1024 [ 84.326592][ T6189] loop3: detected capacity change from 0 to 1024 [ 84.350218][ T6190] loop1: detected capacity change from 0 to 1024 executing program [pid 6189] <... chdir resumed>) = 0 [pid 6188] chdir("./file1" [pid 6192] write(1, "executing program\n", 18 [pid 6191] <... mmap resumed>) = 0x7fd6d9800000 [pid 6190] <... mkdir resumed>) = 0 [pid 6192] <... write resumed>) = 18 [pid 6189] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6188] <... chdir resumed>) = 0 [pid 6190] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6188] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6192] memfd_create("syzkaller", 0 [pid 6189] <... openat resumed>) = 4 [pid 6188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6192] <... memfd_create resumed>) = 3 [pid 6188] chdir("./file0" [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6189] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6190] chdir("./file1" [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6190] <... chdir resumed>) = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6190] chdir("./file0" [pid 6188] <... chdir resumed>) = 0 [pid 6189] <... creat resumed>) = 5 [pid 6188] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6190] <... chdir resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6190] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6191] <... write resumed>) = 524288 [pid 6189] sync( [pid 6188] <... openat resumed>) = 4 [pid 6191] munmap(0x7fd6d9800000, 138412032 [pid 6188] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6192] <... write resumed>) = 524288 [pid 6191] <... munmap resumed>) = 0 [pid 6188] <... creat resumed>) = 5 [pid 6190] <... creat resumed>) = 5 [pid 6192] munmap(0x7fd6d9800000, 138412032 [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6192] <... munmap resumed>) = 0 [pid 6191] <... openat resumed>) = 4 [pid 6190] sync( [pid 6188] sync( [pid 6191] ioctl(4, LOOP_SET_FD, 3 [pid 6192] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6192] ioctl(4, LOOP_SET_FD, 3 [pid 6191] <... ioctl resumed>) = 0 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] mkdir("./file1", 0777) = 0 [pid 6191] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6192] <... ioctl resumed>) = 0 [pid 6190] <... sync resumed>) = 0 [pid 6189] <... sync resumed>) = 0 [pid 6188] <... sync resumed>) = 0 [pid 6190] exit_group(0 [pid 6189] exit_group(0 [pid 6192] close(3 [pid 6190] <... exit_group resumed>) = ? [pid 6189] <... exit_group resumed>) = ? [pid 6188] exit_group(0 [pid 6192] <... close resumed>) = 0 [pid 6191] <... mount resumed>) = 0 [pid 6190] +++ exited with 0 +++ [pid 6188] <... exit_group resumed>) = ? [pid 6192] close(4 [pid 6191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6189] +++ exited with 0 +++ [pid 6192] <... close resumed>) = 0 [pid 6188] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6188, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6191] <... openat resumed>) = 3 [pid 6192] mkdir("./file1", 0777 [pid 6191] chdir("./file1" [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... mkdir resumed>) = 0 [pid 6191] <... chdir resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 6191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] newfstatat(3, "", [ 84.449485][ T6191] loop0: detected capacity change from 0 to 1024 [ 84.454938][ T6192] loop2: detected capacity change from 0 to 1024 [pid 5832] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6191] chdir("./file0" [pid 5833] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5830] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5833] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] unlink("./69/binderfs" [pid 5833] getdents64(3, [pid 5832] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 6192] <... mount resumed>) = 0 [pid 6191] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6191] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5830] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] chdir("./file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5832] unlink("./71/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5833] unlink("./69/binderfs") = 0 [pid 5832] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 5833] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6191] <... openat resumed>) = 4 [pid 6192] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6191] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] chdir("./file0" [pid 5832] <... umount2 resumed>) = 0 [pid 5832] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./69/file1", [pid 6192] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... openat resumed>) = 4 [pid 6191] <... creat resumed>) = 5 [pid 5833] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6191] sync( [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./69/file1", [pid 5832] newfstatat(4, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./69/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5830] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(4, [pid 5833] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5832] close(4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 6192] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6192] sync( [pid 5833] getdents64(4, [pid 5832] rmdir("./71/file1" [pid 5830] close(4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./69/file1" [pid 5833] close(4) = 0 [pid 5833] rmdir("./69/file1" [pid 5830] <... rmdir resumed>) = 0 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 6192] <... sync resumed>) = 0 [pid 6191] <... sync resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 5833] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 6191] exit_group(0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5830] rmdir("./69" [pid 6192] exit_group(0 [pid 6191] <... exit_group resumed>) = ? [pid 5833] close(3 [pid 5832] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6192] <... exit_group resumed>) = ? [pid 6191] +++ exited with 0 +++ [pid 5833] rmdir("./69" [pid 5832] rmdir("./71" [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./70", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6192] +++ exited with 0 +++ [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] mkdir("./70", 0777 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] mkdir("./72", 0777 [pid 5833] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6193 attached [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6193] set_robust_list(0x555557df1660, 24 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6193] <... set_robust_list resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6193 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] chdir("./70" [pid 5833] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] <... chdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... ioctl resumed>) = 0 [pid 5831] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 3 [pid 6193] <... prctl resumed>) = 0 [pid 5833] close(3 [pid 5831] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(3, "", [pid 6193] setpgid(0, 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6193] <... setpgid resumed>) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6193] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6195 attached ./strace-static-x86_64: Process 6194 attached [pid 6193] write(3, "1000", 4 [pid 5831] newfstatat(3, "", [pid 5829] getdents64(3, [pid 6193] <... write resumed>) = 4 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6195 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6194 [pid 6193] close(3 [pid 6195] set_robust_list(0x555557df1660, 24 [pid 6194] set_robust_list(0x555557df1660, 24 [pid 6193] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6195] <... set_robust_list resumed>) = 0 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs" [pid 5831] getdents64(3, [pid 6195] chdir("./70" [pid 6194] chdir("./72" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6193] <... symlink resumed>) = 0 [pid 6195] <... chdir resumed>) = 0 executing program [pid 6194] <... chdir resumed>) = 0 [pid 6193] write(1, "executing program\n", 18 [pid 5831] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6193] <... write resumed>) = 18 [pid 6195] <... prctl resumed>) = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6193] memfd_create("syzkaller", 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6193] <... memfd_create resumed>) = 3 [pid 6195] setpgid(0, 0 [pid 6194] <... prctl resumed>) = 0 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6195] <... setpgid resumed>) = 0 [pid 6194] setpgid(0, 0 [pid 6193] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6194] <... setpgid resumed>) = 0 [pid 5831] unlink("./70/binderfs" [pid 5829] unlink("./70/binderfs" [pid 6195] <... openat resumed>) = 3 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] write(3, "1000", 4 [pid 6194] <... openat resumed>) = 3 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 6195] <... write resumed>) = 4 [pid 6195] close(3 [pid 6194] write(3, "1000", 4 [pid 5831] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6195] <... close resumed>) = 0 [pid 6194] <... write resumed>) = 4 [pid 6195] symlink("/dev/binderfs", "./binderfs" [pid 6194] close(3 [pid 6195] <... symlink resumed>) = 0 [pid 6194] <... close resumed>) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs" [pid 6195] write(1, "executing program\n", 18 [pid 6194] <... symlink resumed>) = 0 executing program [pid 6195] <... write resumed>) = 18 executing program [pid 6195] memfd_create("syzkaller", 0 [pid 6194] write(1, "executing program\n", 18 [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6195] <... memfd_create resumed>) = 3 [pid 6194] <... write resumed>) = 18 [pid 6193] <... write resumed>) = 524288 [pid 5829] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6194] memfd_create("syzkaller", 0 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6195] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./70/file1", [pid 6194] <... memfd_create resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./70/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5829] newfstatat(4, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6194] <... mmap resumed>) = 0x7fd6d9800000 [pid 6193] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5829] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] rmdir("./70/file1" [pid 6193] <... munmap resumed>) = 0 [pid 5831] close(4 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./70/file1" [pid 5829] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./70") = 0 [pid 6195] <... write resumed>) = 524288 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] getdents64(3, [pid 6195] munmap(0x7fd6d9800000, 138412032 [pid 6193] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] mkdir("./71", 0777 [pid 6195] <... munmap resumed>) = 0 [pid 6193] ioctl(4, LOOP_SET_FD, 3 [pid 5831] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6194] <... write resumed>) = 524288 [pid 5831] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6195] <... openat resumed>) = 4 [pid 6194] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5831] rmdir("./70" [pid 5829] <... openat resumed>) = 3 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 6194] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6193] <... ioctl resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6194] <... openat resumed>) = 4 [pid 6193] close(3 [pid 5831] mkdir("./71", 0777 [pid 5829] <... ioctl resumed>) = 0 [pid 6193] <... close resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] close(3 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 6193] close(4 [pid 6195] <... ioctl resumed>) = 0 [pid 6194] <... ioctl resumed>) = 0 [pid 6193] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 6193] mkdir("./file1", 0777) = 0 [pid 6193] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6194] close(3 [pid 6195] close(3 [pid 6193] <... mount resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6195] <... close resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6195] close(4 [pid 6193] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6193] chdir("./file1"./strace-static-x86_64: Process 6196 attached [pid 6195] <... close resumed>) = 0 [pid 6193] <... chdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6196] set_robust_list(0x555557df1660, 24 [pid 6195] mkdir("./file1", 0777 [pid 6194] <... close resumed>) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] close(3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6196 [pid 6196] <... set_robust_list resumed>) = 0 [pid 6195] <... mkdir resumed>) = 0 [pid 6194] close(4 [pid 6193] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6196] chdir("./71" [pid 6195] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6194] <... close resumed>) = 0 [pid 6193] chdir("./file0" [pid 6196] <... chdir resumed>) = 0 [pid 6194] mkdir("./file1", 0777 [pid 6193] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] <... mkdir resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6196] setpgid(0, 0 [pid 6194] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6193] <... openat resumed>) = 4 [pid 6196] <... setpgid resumed>) = 0 [pid 6195] <... mount resumed>) = 0 [ 84.691531][ T6193] loop1: detected capacity change from 0 to 1024 [ 84.696074][ T6195] loop4: detected capacity change from 0 to 1024 [ 84.704443][ T6194] loop3: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6197 attached [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6193] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6196] <... openat resumed>) = 3 [pid 6196] write(3, "1000", 4 [pid 6195] <... openat resumed>) = 3 [pid 6196] <... write resumed>) = 4 [pid 6197] set_robust_list(0x555557df1660, 24 [pid 6196] close(3 [pid 6195] chdir("./file1" [pid 6193] <... creat resumed>) = 5 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6197 [pid 6197] <... set_robust_list resumed>) = 0 [pid 6196] <... close resumed>) = 0 [pid 6195] <... chdir resumed>) = 0 [pid 6197] chdir("./71" [pid 6196] symlink("/dev/binderfs", "./binderfs" [pid 6195] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6194] <... mount resumed>) = 0 [pid 6193] sync( [pid 6197] <... chdir resumed>) = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] <... symlink resumed>) = 0 [pid 6195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6194] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6197] <... prctl resumed>) = 0 [pid 6195] chdir("./file0" [pid 6194] <... openat resumed>) = 3 [pid 6197] setpgid(0, 0) = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] <... chdir resumed>) = 0 [pid 6194] chdir("./file1") = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6194] chdir("./file0" executing program [pid 6197] <... openat resumed>) = 3 [pid 6196] write(1, "executing program\n", 18 [pid 6195] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6197] write(3, "1000", 4 [pid 6196] <... write resumed>) = 18 [pid 6194] <... chdir resumed>) = 0 [pid 6196] memfd_create("syzkaller", 0 [pid 6197] <... write resumed>) = 4 [pid 6196] <... memfd_create resumed>) = 3 [pid 6195] <... openat resumed>) = 4 [pid 6194] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6197] close(3 [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6195] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6196] <... mmap resumed>) = 0x7fd6d9800000 [pid 6194] <... openat resumed>) = 4 [pid 6193] <... sync resumed>) = 0 [pid 6197] <... close resumed>) = 0 [pid 6193] exit_group(0) = ? [pid 6193] +++ exited with 0 +++ [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6197] write(1, "executing program\n", 18 [pid 6195] <... creat resumed>) = 5 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6197] <... write resumed>) = 18 [pid 6195] sync(executing program [pid 6197] memfd_create("syzkaller", 0 [pid 6194] <... creat resumed>) = 5 [pid 6197] <... memfd_create resumed>) = 3 [pid 6196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6195] <... sync resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5830] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6194] sync( [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", [pid 6195] exit_group(0) = ? [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6194] <... sync resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6194] exit_group(0 [pid 6195] +++ exited with 0 +++ [pid 5830] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6194] <... exit_group resumed>) = ? [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6194] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6194, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6196] <... write resumed>) = 524288 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] unlink("./70/binderfs" [pid 5833] <... openat resumed>) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5830] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, [pid 5832] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(3, "", [pid 5833] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] unlink("./70/binderfs" [pid 5832] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5830] <... umount2 resumed>) = 0 [pid 6196] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./72/binderfs") = 0 [pid 5832] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6196] <... munmap resumed>) = 0 [pid 5830] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6197] <... write resumed>) = 524288 [pid 6196] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... openat resumed>) = 4 [pid 6197] munmap(0x7fd6d9800000, 138412032 [pid 6196] ioctl(4, LOOP_SET_FD, 3 [pid 5830] newfstatat(AT_FDCWD, "./70/file1", [pid 5833] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6197] <... munmap resumed>) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 6196] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6196] close(3 [pid 5833] newfstatat(AT_FDCWD, "./70/file1", [pid 5832] newfstatat(AT_FDCWD, "./72/file1", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] close(4 [pid 5833] umount2("./70/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 6196] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(4, "", [pid 6196] mkdir("./file1", 0777 [pid 5833] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 4 [pid 5830] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5832] newfstatat(4, "", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6196] <... mkdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6196] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] close(4 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./70/file1" [pid 6197] <... ioctl resumed>) = 0 [pid 6196] <... mount resumed>) = 0 [pid 5833] close(4 [pid 5832] close(4 [pid 5830] <... rmdir resumed>) = 0 [pid 6197] close(3 [pid 6196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 6197] <... close resumed>) = 0 [pid 6196] <... openat resumed>) = 3 [pid 5833] rmdir("./70/file1" [pid 5832] rmdir("./72/file1" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6197] close(4 [pid 6196] chdir("./file1" [pid 6197] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6196] <... chdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 6196] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] getdents64(3, [pid 5832] getdents64(3, [pid 5830] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./70" [pid 6196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] close(3 [pid 6197] mkdir("./file1", 0777) = 0 [pid 6196] chdir("./file0" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] close(3 [pid 5832] rmdir("./72" [pid 6197] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./73", 0777 [pid 5830] mkdir("./71", 0777 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./70" [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./71", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6196] <... chdir resumed>) = 0 [pid 6196] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6197] <... mount resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... close resumed>) = 0 [pid 6197] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6196] <... openat resumed>) = 4 [pid 5833] <... ioctl resumed>) = 0 [pid 6196] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... openat resumed>) = 3 [pid 5833] close(3 [pid 6197] chdir("./file1") = 0 [ 84.860404][ T6196] loop0: detected capacity change from 0 to 1024 [ 84.863157][ T6197] loop2: detected capacity change from 0 to 1024 [pid 6197] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 6197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6197] chdir("./file0" [pid 5832] close(3) = 0 [pid 6196] <... creat resumed>) = 5 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6198 attached [pid 5833] <... close resumed>) = 0 [pid 6196] sync( [pid 6198] set_robust_list(0x555557df1660, 24) = 0 [pid 6197] <... chdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6198 [pid 6198] chdir("./71" [pid 6197] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000./strace-static-x86_64: Process 6199 attached [pid 6198] <... chdir resumed>) = 0 [pid 6197] <... openat resumed>) = 4 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6200 attached [pid 6199] set_robust_list(0x555557df1660, 24 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6197] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6200] set_robust_list(0x555557df1660, 24 [pid 6199] <... set_robust_list resumed>) = 0 [pid 6198] <... prctl resumed>) = 0 [pid 6197] <... creat resumed>) = 5 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6200 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6199 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6199] chdir("./73" [pid 6198] setpgid(0, 0 [pid 6197] sync( [pid 6199] <... chdir resumed>) = 0 [pid 6200] chdir("./71" [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6199] setpgid(0, 0) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] <... setpgid resumed>) = 0 [pid 6200] <... chdir resumed>) = 0 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6200] setpgid(0, 0 [pid 6199] write(3, "1000", 4 [pid 6198] <... openat resumed>) = 3 [pid 6199] <... write resumed>) = 4 [pid 6199] close(3) = 0 [pid 6199] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6199] write(1, "executing program\n", 18) = 18 [pid 6199] memfd_create("syzkaller", 0) = 3 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6200] <... setpgid resumed>) = 0 [pid 6199] <... mmap resumed>) = 0x7fd6d9800000 [pid 6198] write(3, "1000", 4 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6198] <... write resumed>) = 4 [pid 6197] <... sync resumed>) = 0 [pid 6198] close(3 [pid 6200] <... openat resumed>) = 3 [pid 6198] <... close resumed>) = 0 [pid 6197] exit_group(0 [pid 6196] <... sync resumed>) = 0 [pid 6197] <... exit_group resumed>) = ? [pid 6196] exit_group(0 [pid 6200] write(3, "1000", 4 [pid 6198] symlink("/dev/binderfs", "./binderfs" [pid 6197] +++ exited with 0 +++ [pid 6196] <... exit_group resumed>) = ? [pid 6200] <... write resumed>) = 4 [pid 6198] <... symlink resumed>) = 0 [pid 6196] +++ exited with 0 +++ [pid 6200] close(3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6200] <... close resumed>) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6198] write(1, "executing program\n", 18 [pid 5829] restart_syscall(<... resuming interrupted clone ...>executing program [pid 6200] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6198] <... write resumed>) = 18 [pid 5829] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6200] <... symlink resumed>) = 0 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6198] memfd_create("syzkaller", 0 [pid 5831] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6200] write(1, "executing program\n", 18 [pid 5831] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6200] <... write resumed>) = 18 [pid 5829] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 6200] memfd_create("syzkaller", 0 [pid 6199] <... write resumed>) = 524288 [pid 6198] <... memfd_create resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 6200] <... memfd_create resumed>) = 3 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] getdents64(3, [pid 6199] munmap(0x7fd6d9800000, 138412032 [pid 5831] getdents64(3, [pid 6200] <... mmap resumed>) = 0x7fd6d9800000 [pid 6198] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6199] <... munmap resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6199] <... openat resumed>) = 4 [pid 5829] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6199] ioctl(4, LOOP_SET_FD, 3 [pid 6200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] <... write resumed>) = 524288 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] unlink("./71/binderfs") = 0 [pid 5831] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5829] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./71/binderfs") = 0 [pid 5831] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6200] <... write resumed>) = 524288 [pid 6199] <... ioctl resumed>) = 0 [pid 6198] munmap(0x7fd6d9800000, 138412032 [pid 6200] munmap(0x7fd6d9800000, 138412032 [pid 6199] close(3 [pid 6200] <... munmap resumed>) = 0 [pid 6199] <... close resumed>) = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6199] close(4) = 0 [pid 6199] mkdir("./file1", 0777 [pid 6200] <... openat resumed>) = 4 [pid 6199] <... mkdir resumed>) = 0 [pid 6198] <... munmap resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5831] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 6200] ioctl(4, LOOP_SET_FD, 3 [pid 6199] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] <... openat resumed>) = 4 [pid 5831] newfstatat(AT_FDCWD, "./71/file1", [pid 5829] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6200] <... ioctl resumed>) = 0 [pid 6199] <... mount resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./71/file1", [pid 6200] close(3 [pid 6199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6198] <... ioctl resumed>) = 0 [pid 5831] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6199] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6199] chdir("./file1" [pid 5831] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6200] <... close resumed>) = 0 [pid 6199] <... chdir resumed>) = 0 [pid 6198] close(3 [pid 5831] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6200] close(4 [pid 6199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6198] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 6200] <... close resumed>) = 0 [pid 6198] close(4 [pid 6200] mkdir("./file1", 0777 [pid 6199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6198] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 6200] <... mkdir resumed>) = 0 [pid 6198] mkdir("./file1", 0777 [pid 5831] getdents64(4, [pid 6200] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6199] chdir("./file0" [pid 6198] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6198] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] getdents64(4, [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] close(4 [pid 6199] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] getdents64(4, [pid 6199] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] rmdir("./71/file1" [pid 6199] <... openat resumed>) = 4 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6199] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] close(4) = 0 [pid 5831] getdents64(3, [pid 5829] rmdir("./71/file1" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./71" [pid 5829] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./71") = 0 [pid 5829] mkdir("./72", 0777 [pid 5831] mkdir("./72", 0777 [pid 6200] <... mount resumed>) = 0 [pid 6199] <... creat resumed>) = 5 [pid 6198] <... mount resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6198] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... mkdir resumed>) = 0 [pid 6198] <... openat resumed>) = 3 [ 85.022216][ T6199] loop3: detected capacity change from 0 to 1024 [ 85.049932][ T6200] loop4: detected capacity change from 0 to 1024 [ 85.058647][ T6198] loop1: detected capacity change from 0 to 1024 [pid 6198] chdir("./file1") = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6198] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 3 [pid 6198] chdir("./file0" [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 6200] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6199] sync( [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6200] <... openat resumed>) = 3 [pid 6200] chdir("./file1" [pid 5829] <... openat resumed>) = 3 [pid 6200] <... chdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6200] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6198] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6200] chdir("./file0" [pid 5829] close(3 [pid 6198] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6200] <... chdir resumed>) = 0 [pid 6198] <... openat resumed>) = 4 [pid 6200] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6198] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6200] <... openat resumed>) = 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 6201 attached [pid 6200] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6201] set_robust_list(0x555557df1660, 24 [pid 6200] <... creat resumed>) = 5 ./strace-static-x86_64: Process 6202 attached [pid 6200] sync( [pid 6201] <... set_robust_list resumed>) = 0 [pid 6199] <... sync resumed>) = 0 [pid 6198] <... creat resumed>) = 5 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6202 [pid 6202] set_robust_list(0x555557df1660, 24 [pid 6201] chdir("./72" [pid 6199] exit_group(0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6201 [pid 6202] <... set_robust_list resumed>) = 0 [pid 6201] <... chdir resumed>) = 0 [pid 6199] <... exit_group resumed>) = ? [pid 6202] chdir("./72" [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] <... chdir resumed>) = 0 [pid 6201] <... prctl resumed>) = 0 [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6201] setpgid(0, 0 [pid 6198] sync( [pid 6201] <... setpgid resumed>) = 0 [pid 6199] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6202] <... prctl resumed>) = 0 [pid 5832] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] setpgid(0, 0 [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6200] <... sync resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] <... setpgid resumed>) = 0 [pid 6200] exit_group(0 [pid 5832] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6200] <... exit_group resumed>) = ? [pid 5832] <... openat resumed>) = 3 [pid 6201] <... openat resumed>) = 3 [pid 6198] <... sync resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 6198] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6201] write(3, "1000", 4 [pid 6200] +++ exited with 0 +++ [pid 6198] <... exit_group resumed>) = ? [pid 5832] getdents64(3, [pid 6202] <... openat resumed>) = 3 [pid 6201] <... write resumed>) = 4 [pid 6198] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6200, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6201] close(3 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 6202] write(3, "1000", 4 [pid 6201] <... close resumed>) = 0 [pid 6202] <... write resumed>) = 4 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 5833] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] close(3 [pid 6201] <... symlink resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] <... close resumed>) = 0 [pid 6201] write(1, "executing program\n", 18 [pid 5833] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5830] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] symlink("/dev/binderfs", "./binderfs" [pid 6201] <... write resumed>) = 18 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5832] unlink("./73/binderfs" [pid 5830] newfstatat(3, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6201] memfd_create("syzkaller", 0 [pid 5833] getdents64(3, [pid 5832] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 6202] <... symlink resumed>) = 0 [pid 6201] <... memfd_create resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6202] write(1, "executing program\n", 18 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6202] <... write resumed>) = 18 [pid 6201] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5830] unlink("./71/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5833] unlink("./71/binderfs" [pid 5830] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5832] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] memfd_create("syzkaller", 0 [pid 5832] newfstatat(AT_FDCWD, "./73/file1", [pid 6202] <... memfd_create resumed>) = 3 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6202] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5830] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5830] newfstatat(AT_FDCWD, "./71/file1", [pid 5833] newfstatat(AT_FDCWD, "./71/file1", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(4 [pid 5830] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./71/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] rmdir("./73/file1" [pid 5830] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5830] newfstatat(4, "", [pid 5833] newfstatat(4, "", [pid 5832] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5833] getdents64(4, [pid 5832] close(3 [pid 6201] <... write resumed>) = 524288 [pid 5832] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6201] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] rmdir("./73" [pid 5830] getdents64(4, [pid 6201] <... munmap resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5833] close(4 [pid 5832] mkdir("./74", 0777 [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./71/file1" [pid 5832] <... mkdir resumed>) = 0 [pid 5830] rmdir("./71/file1" [pid 6202] <... write resumed>) = 524288 [pid 6201] ioctl(4, LOOP_SET_FD, 3 [pid 6202] munmap(0x7fd6d9800000, 138412032 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5830] getdents64(3, [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6202] <... munmap resumed>) = 0 [pid 6201] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./71") = 0 [pid 6201] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6201] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6201] close(4 [pid 5833] rmdir("./71" [pid 5832] <... ioctl resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] mkdir("./72", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6202] <... openat resumed>) = 4 [pid 6201] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] close(3 [pid 6202] ioctl(4, LOOP_SET_FD, 3 [pid 6201] mkdir("./file1", 0777 [pid 5833] mkdir("./72", 0777 [pid 5830] <... openat resumed>) = 3 [pid 6201] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6202] <... ioctl resumed>) = 0 [pid 6201] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... mkdir resumed>) = 0 [pid 6202] close(3) = 0 [pid 6202] close(4) = 0 [pid 6202] mkdir("./file1", 0777) = 0 [pid 6202] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6201] <... mount resumed>) = 0 [pid 6201] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... ioctl resumed>) = 0 [pid 6201] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] close(3 [pid 6201] chdir("./file1") = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6201] chdir("./file0"./strace-static-x86_64: Process 6203 attached [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6203 [pid 5830] <... close resumed>) = 0 [pid 6203] set_robust_list(0x555557df1660, 24 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6203] <... set_robust_list resumed>) = 0 [pid 5833] close(3 [pid 6203] chdir("./74" [pid 6201] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6204 attached [pid 6201] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6202] <... mount resumed>) = 0 [pid 6201] <... openat resumed>) = 4 [pid 5833] <... close resumed>) = 0 [pid 6203] <... chdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6204 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6204] set_robust_list(0x555557df1660, 24 [pid 6203] <... prctl resumed>) = 0 [pid 6202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6204] <... set_robust_list resumed>) = 0 [pid 6203] setpgid(0, 0 [pid 6202] <... openat resumed>) = 3 [pid 6204] chdir("./72" [pid 6203] <... setpgid resumed>) = 0 [pid 6202] chdir("./file1") = 0 [pid 6204] <... chdir resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6202] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6201] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6203] <... openat resumed>) = 3 [pid 6202] chdir("./file0" [pid 6204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6203] write(3, "1000", 4 [pid 6202] <... chdir resumed>) = 0 [pid 6201] <... creat resumed>) = 5 [pid 6204] <... prctl resumed>) = 0 [ 85.219187][ T6201] loop2: detected capacity change from 0 to 1024 [ 85.243234][ T6202] loop0: detected capacity change from 0 to 1024 [pid 6202] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6201] sync( [pid 6204] setpgid(0, 0 [pid 6203] <... write resumed>) = 4 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6204] <... setpgid resumed>) = 0 [pid 6203] close(3 [pid 6202] <... openat resumed>) = 4 [pid 6204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6203] <... close resumed>) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6205 attached [pid 6205] set_robust_list(0x555557df1660, 24 [pid 6204] <... openat resumed>) = 3 [pid 6203] <... symlink resumed>) = 0 [pid 6202] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6205 [pid 6205] <... set_robust_list resumed>) = 0 [pid 6204] write(3, "1000", 4 [pid 6205] chdir("./72") = 0 [pid 6204] <... write resumed>) = 4 executing program [pid 6203] write(1, "executing program\n", 18 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6204] close(3 [pid 6205] <... prctl resumed>) = 0 [pid 6204] <... close resumed>) = 0 [pid 6203] <... write resumed>) = 18 [pid 6205] setpgid(0, 0 [pid 6204] symlink("/dev/binderfs", "./binderfs" [pid 6205] <... setpgid resumed>) = 0 [pid 6204] <... symlink resumed>) = 0 [pid 6203] memfd_create("syzkaller", 0 [pid 6202] <... creat resumed>) = 5 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6203] <... memfd_create resumed>) = 3 [pid 6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6204] write(1, "executing program\n", 18 [pid 6202] sync( [pid 6201] <... sync resumed>) = 0 [pid 6205] <... openat resumed>) = 3 [pid 6204] <... write resumed>) = 18 [pid 6203] <... mmap resumed>) = 0x7fd6d9800000 [pid 6205] write(3, "1000", 4 [pid 6204] memfd_create("syzkaller", 0 [pid 6201] exit_group(0 [pid 6204] <... memfd_create resumed>) = 3 [pid 6201] <... exit_group resumed>) = ? [pid 6205] <... write resumed>) = 4 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6201] +++ exited with 0 +++ [pid 6205] close(3 [pid 6204] <... mmap resumed>) = 0x7fd6d9800000 [pid 6205] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] restart_syscall(<... resuming interrupted clone ...>executing program [pid 6205] write(1, "executing program\n", 18 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6205] <... write resumed>) = 18 [pid 5831] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] <... sync resumed>) = 0 [pid 6202] exit_group(0) = ? [pid 6205] memfd_create("syzkaller", 0 [pid 6203] <... write resumed>) = 524288 [pid 6202] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... memfd_create resumed>) = 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6205] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6204] <... write resumed>) = 524288 [pid 6203] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 5829] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] munmap(0x7fd6d9800000, 138412032 [pid 5831] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5829] <... openat resumed>) = 3 [pid 6203] <... munmap resumed>) = 0 [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6204] <... munmap resumed>) = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(3, "", [pid 5831] unlink("./72/binderfs" [pid 6204] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6203] <... openat resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6203] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... unlink resumed>) = 0 [pid 5829] getdents64(3, [pid 5831] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6204] <... openat resumed>) = 4 [pid 5829] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6204] ioctl(4, LOOP_SET_FD, 3 [pid 6205] <... write resumed>) = 524288 [pid 6203] <... ioctl resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] close(3 [pid 5829] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6203] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6205] munmap(0x7fd6d9800000, 138412032 [pid 6203] close(4 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] unlink("./72/binderfs" [pid 6203] <... close resumed>) = 0 [pid 6203] mkdir("./file1", 0777 [pid 5831] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 6205] <... munmap resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./72/file1", [pid 6205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6203] <... mkdir resumed>) = 0 [pid 5829] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6205] <... openat resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 6203] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./72/file1") = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6204] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 6204] close(3 [pid 5831] <... close resumed>) = 0 [pid 6204] <... close resumed>) = 0 [pid 5831] rmdir("./72" [pid 6204] close(4 [pid 5831] <... rmdir resumed>) = 0 [pid 6204] <... close resumed>) = 0 [pid 6205] <... ioctl resumed>) = 0 [pid 6204] mkdir("./file1", 0777 [pid 5831] mkdir("./73", 0777 [pid 6204] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6204] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... umount2 resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6203] <... mount resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6203] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6205] close(3) = 0 [pid 6203] <... openat resumed>) = 3 [pid 5831] close(3 [pid 5829] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6205] close(4 [pid 6203] chdir("./file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... close resumed>) = 0 [pid 6203] <... chdir resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./72/file1", [pid 6205] mkdir("./file1", 0777) = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6205] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6203] chdir("./file0" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6204] <... mount resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 6204] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] newfstatat(4, "", [pid 6204] <... openat resumed>) = 3 [pid 6203] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 6204] chdir("./file1" [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6203] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] close(4 [pid 6203] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 6204] <... chdir resumed>) = 0 [pid 6203] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] rmdir("./72/file1"./strace-static-x86_64: Process 6206 attached [pid 6204] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6206 [pid 5829] <... rmdir resumed>) = 0 [pid 6204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6204] chdir("./file0" [pid 5829] getdents64(3, [pid 6206] set_robust_list(0x555557df1660, 24 [pid 6204] <... chdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6204] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] close(3 [pid 6206] chdir("./73" [pid 6204] <... openat resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 6206] <... chdir resumed>) = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0 [pid 5829] rmdir("./72" [pid 6206] <... setpgid resumed>) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6204] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6203] <... creat resumed>) = 5 [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./73", 0777 [pid 6206] <... openat resumed>) = 3 [pid 5829] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 85.366502][ T6203] loop3: detected capacity change from 0 to 1024 [ 85.375050][ T6204] loop1: detected capacity change from 0 to 1024 [ 85.394801][ T6205] loop4: detected capacity change from 0 to 1024 [pid 6206] write(3, "1000", 4) = 4 [pid 6205] <... mount resumed>) = 0 [pid 6204] <... creat resumed>) = 5 [pid 6203] sync( [pid 5829] <... openat resumed>) = 3 [pid 6205] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6205] chdir("./file1") = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6206] close(3 [pid 5829] close(3 [pid 6206] <... close resumed>) = 0 [pid 6204] sync( [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6206] write(1, "executing program\n", 18) = 18 [pid 6205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6206] memfd_create("syzkaller", 0 [pid 6205] chdir("./file0" [pid 6206] <... memfd_create resumed>) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6205] <... chdir resumed>) = 0 [pid 6204] <... sync resumed>) = 0 [pid 6203] <... sync resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6205] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6204] exit_group(0 [pid 6203] exit_group(0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6203] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6207 attached [pid 6205] <... openat resumed>) = 4 [pid 6203] +++ exited with 0 +++ [pid 6204] <... exit_group resumed>) = ? [pid 6205] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6204] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6207 [pid 6207] set_robust_list(0x555557df1660, 24 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6204, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6207] <... set_robust_list resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6207] chdir("./73" [pid 5830] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5832] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6207] <... chdir resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] <... prctl resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6207] setpgid(0, 0) = 0 [pid 5832] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6207] <... openat resumed>) = 3 [pid 5830] unlink("./72/binderfs" [pid 6207] write(3, "1000", 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] <... write resumed>) = 4 [pid 6207] close(3 [pid 6205] <... creat resumed>) = 5 [pid 5832] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5830] <... unlink resumed>) = 0 [pid 6207] <... close resumed>) = 0 [pid 6205] sync( [pid 6207] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] <... symlink resumed>) = 0 [pid 5832] unlink("./74/binderfs"executing program [pid 6207] write(1, "executing program\n", 18 [pid 5832] <... unlink resumed>) = 0 [pid 6207] <... write resumed>) = 18 [pid 5832] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6206] <... write resumed>) = 524288 [pid 6207] <... mmap resumed>) = 0x7fd6d9800000 [pid 6206] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6206] <... munmap resumed>) = 0 [pid 5832] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6206] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./72/file1", [pid 5832] newfstatat(AT_FDCWD, "./74/file1", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6206] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6206] ioctl(4, LOOP_SET_FD, 3 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6205] <... sync resumed>) = 0 [pid 5832] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6206] <... ioctl resumed>) = 0 [pid 6205] exit_group(0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... exit_group resumed>) = ? [pid 5832] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6205] +++ exited with 0 +++ [pid 6206] mkdir("./file1", 0777 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 6206] <... mkdir resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5830] newfstatat(4, "", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 6206] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6207] <... write resumed>) = 524288 [pid 6207] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6206] <... mount resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, [pid 6206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 6206] <... openat resumed>) = 3 [pid 5833] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 6207] <... openat resumed>) = 4 [pid 6206] chdir("./file1" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./72/file1" [pid 5833] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 85.517408][ T6206] loop2: detected capacity change from 0 to 1024 [pid 6207] ioctl(4, LOOP_SET_FD, 3 [pid 5832] getdents64(4, [pid 6206] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] newfstatat(3, "", [pid 5830] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(3, [pid 5830] close(3 [pid 6207] <... ioctl resumed>) = 0 [pid 6206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 6207] close(3 [pid 6206] chdir("./file0" [pid 5833] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(4 [pid 5830] rmdir("./72" [pid 6207] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5832] rmdir("./74/file1" [pid 5830] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] mkdir("./73", 0777 [pid 6207] close(4 [pid 5833] unlink("./72/binderfs" [pid 5832] getdents64(3, [pid 6207] <... close resumed>) = 0 [pid 6206] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6207] mkdir("./file1", 0777 [pid 6206] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 6207] <... mkdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6207] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] rmdir("./74" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6207] <... mount resumed>) = 0 [pid 6206] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] mkdir("./75", 0777 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... ioctl resumed>) = 0 [pid 6207] <... openat resumed>) = 3 [pid 5830] close(3 [pid 6207] chdir("./file1" [pid 6206] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6207] <... chdir resumed>) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6207] chdir("./file0" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./72/file1", ./strace-static-x86_64: Process 6208 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6208] set_robust_list(0x555557df1660, 24 [pid 5833] umount2("./72/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 6208] <... set_robust_list resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6208] chdir("./73" [pid 5833] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... ioctl resumed>) = 0 [pid 6207] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] close(3 [pid 6206] <... creat resumed>) = 5 [pid 5833] newfstatat(4, "", [pid 6207] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6208 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6206] sync( [ 85.561342][ T6207] loop0: detected capacity change from 0 to 1024 [pid 5833] getdents64(4, [pid 6208] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(4 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... close resumed>) = 0 ./strace-static-x86_64: Process 6209 attached [pid 6208] <... prctl resumed>) = 0 [pid 6207] <... openat resumed>) = 4 [pid 5833] rmdir("./72/file1" [pid 6209] set_robust_list(0x555557df1660, 24 [pid 6207] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6208] setpgid(0, 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6209 [pid 6209] chdir("./75" [pid 6208] <... setpgid resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6209] <... chdir resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] <... creat resumed>) = 5 [pid 6206] <... sync resumed>) = 0 [pid 5833] getdents64(3, [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6208] <... openat resumed>) = 3 [pid 6206] exit_group(0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6209] <... prctl resumed>) = 0 [pid 6208] write(3, "1000", 4 [pid 6206] <... exit_group resumed>) = ? [pid 6209] setpgid(0, 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./72" [pid 6209] <... setpgid resumed>) = 0 [pid 6208] <... write resumed>) = 4 [pid 6207] sync( [pid 6206] +++ exited with 0 +++ [pid 5833] <... rmdir resumed>) = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6208] close(3 [pid 5833] mkdir("./73", 0777 [pid 6209] <... openat resumed>) = 3 [pid 6208] <... close resumed>) = 0 [pid 6209] write(3, "1000", 4 [pid 6208] symlink("/dev/binderfs", "./binderfs" [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6209] <... write resumed>) = 4 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6209] close(3 [pid 6208] <... symlink resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6209] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... openat resumed>) = 3 executing program [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6209] <... symlink resumed>) = 0 [pid 6208] write(1, "executing program\n", 18 [pid 5833] <... ioctl resumed>) = 0 [pid 6209] write(1, "executing program\n", 18 [pid 6208] <... write resumed>) = 18 [pid 5833] close(3 [pid 5831] <... restart_syscall resumed>) = 0 executing program [pid 6207] <... sync resumed>) = 0 [pid 6207] exit_group(0 [pid 5831] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6207] <... exit_group resumed>) = ? [pid 5831] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] <... write resumed>) = 18 [pid 6208] memfd_create("syzkaller", 0 [pid 6207] +++ exited with 0 +++ [pid 5831] <... openat resumed>) = 3 [pid 6209] memfd_create("syzkaller", 0 [pid 6208] <... memfd_create resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6209] <... memfd_create resumed>) = 3 [pid 6208] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./73/binderfs" [pid 5829] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6210 attached [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] set_robust_list(0x555557df1660, 24 [pid 5831] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6210 [pid 5829] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] chdir("./73" [pid 6209] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 6210] <... chdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] getdents64(3, [pid 6210] <... prctl resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6210] setpgid(0, 0 [pid 5829] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] <... setpgid resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./73/binderfs") = 0 [pid 6210] <... openat resumed>) = 3 [pid 5829] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] write(3, "1000", 4) = 4 [pid 6210] close(3) = 0 [pid 6210] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6210] write(1, "executing program\n", 18 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6210] <... write resumed>) = 18 [pid 5829] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] memfd_create("syzkaller", 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./73/file1", [pid 6210] <... memfd_create resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(AT_FDCWD, "./73/file1", [pid 6210] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5829] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6208] <... write resumed>) = 524288 [pid 5831] getdents64(4, [pid 5829] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] close(4 [pid 5829] rmdir("./73/file1" [pid 5831] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] rmdir("./73/file1" [pid 6209] <... write resumed>) = 524288 [pid 5831] <... rmdir resumed>) = 0 [pid 6209] munmap(0x7fd6d9800000, 138412032 [pid 5829] getdents64(3, [pid 5831] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5831] close(3 [pid 5829] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5829] rmdir("./73" [pid 6209] <... munmap resumed>) = 0 [pid 5831] rmdir("./73" [pid 5829] <... rmdir resumed>) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6208] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... rmdir resumed>) = 0 [pid 6208] <... munmap resumed>) = 0 [pid 6209] <... openat resumed>) = 4 [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] mkdir("./74", 0777 [pid 5829] mkdir("./74", 0777 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6208] <... openat resumed>) = 4 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6210] <... write resumed>) = 524288 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5829] close(3 [pid 6208] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... close resumed>) = 0 [pid 6210] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6211 attached ./strace-static-x86_64: Process 6212 attached [pid 6211] set_robust_list(0x555557df1660, 24 [pid 6210] <... ioctl resumed>) = 0 [pid 6209] <... ioctl resumed>) = 0 [pid 6208] <... ioctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6212 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6211 [pid 6212] set_robust_list(0x555557df1660, 24 [pid 6211] <... set_robust_list resumed>) = 0 [pid 6209] close(3 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] chdir("./74" [pid 6209] <... close resumed>) = 0 [pid 6212] chdir("./74" [pid 6211] <... chdir resumed>) = 0 [pid 6209] close(4 [pid 6212] <... chdir resumed>) = 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6210] close(3 [pid 6209] <... close resumed>) = 0 [pid 6208] close(3 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] setpgid(0, 0 [pid 6210] <... close resumed>) = 0 [pid 6209] mkdir("./file1", 0777 [pid 6208] <... close resumed>) = 0 [pid 6212] <... prctl resumed>) = 0 [pid 6211] <... setpgid resumed>) = 0 [pid 6210] close(4 [pid 6208] close(4 [pid 6212] setpgid(0, 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6210] <... close resumed>) = 0 [pid 6209] <... mkdir resumed>) = 0 [pid 6208] <... close resumed>) = 0 [pid 6211] <... openat resumed>) = 3 [pid 6208] mkdir("./file1", 0777 [pid 6211] write(3, "1000", 4 [pid 6208] <... mkdir resumed>) = 0 [pid 6211] <... write resumed>) = 4 [pid 6210] mkdir("./file1", 0777 [pid 6208] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6211] close(3) = 0 [pid 6212] <... setpgid resumed>) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs" [pid 6210] <... mkdir resumed>) = 0 [pid 6209] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] <... symlink resumed>) = 0 [ 85.726956][ T6209] loop3: detected capacity change from 0 to 1024 [ 85.737736][ T6208] loop1: detected capacity change from 0 to 1024 [ 85.741542][ T6210] loop4: detected capacity change from 0 to 1024 executing program [pid 6212] <... openat resumed>) = 3 [pid 6211] write(1, "executing program\n", 18 [pid 6209] <... mount resumed>) = 0 [pid 6212] write(3, "1000", 4 [pid 6211] <... write resumed>) = 18 [pid 6210] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6209] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6212] <... write resumed>) = 4 [pid 6212] close(3 [pid 6211] memfd_create("syzkaller", 0 [pid 6209] <... openat resumed>) = 3 [pid 6212] <... close resumed>) = 0 [pid 6209] chdir("./file1" [pid 6212] symlink("/dev/binderfs", "./binderfs" [pid 6209] <... chdir resumed>) = 0 executing program [pid 6212] <... symlink resumed>) = 0 [pid 6211] <... memfd_create resumed>) = 3 [pid 6209] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6208] <... mount resumed>) = 0 [pid 6212] write(1, "executing program\n", 18) = 18 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6209] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6212] memfd_create("syzkaller", 0 [pid 6211] <... mmap resumed>) = 0x7fd6d9800000 [pid 6209] chdir("./file0" [pid 6208] <... openat resumed>) = 3 [pid 6212] <... memfd_create resumed>) = 3 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6209] <... chdir resumed>) = 0 [pid 6208] chdir("./file1" [pid 6212] <... mmap resumed>) = 0x7fd6d9800000 [pid 6209] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6208] <... chdir resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6208] chdir("./file0" [pid 6209] <... openat resumed>) = 4 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6211] <... write resumed>) = 524288 [pid 6210] <... mount resumed>) = 0 [pid 6209] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6208] <... chdir resumed>) = 0 [pid 6210] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6208] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6210] <... openat resumed>) = 3 [pid 6208] <... openat resumed>) = 4 [pid 6210] chdir("./file1" [pid 6208] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6210] <... chdir resumed>) = 0 [pid 6211] munmap(0x7fd6d9800000, 138412032 [pid 6210] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6208] <... creat resumed>) = 5 [pid 6210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6208] sync( [pid 6211] <... munmap resumed>) = 0 [pid 6210] chdir("./file0" [pid 6209] <... creat resumed>) = 5 [pid 6210] <... chdir resumed>) = 0 [pid 6209] sync( [pid 6210] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6212] <... write resumed>) = 524288 [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 6210] <... openat resumed>) = 4 [pid 6210] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6212] munmap(0x7fd6d9800000, 138412032 [pid 6211] <... ioctl resumed>) = 0 [pid 6209] <... sync resumed>) = 0 [pid 6208] <... sync resumed>) = 0 [pid 6212] <... munmap resumed>) = 0 [pid 6209] exit_group(0 [pid 6212] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6209] <... exit_group resumed>) = ? [pid 6208] exit_group(0 [pid 6209] +++ exited with 0 +++ [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 6208] <... exit_group resumed>) = ? [pid 6210] <... creat resumed>) = 5 [pid 6211] close(3 [pid 6208] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6211] <... close resumed>) = 0 [pid 6210] sync( [pid 5832] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 6211] close(4 [pid 5830] newfstatat(3, "", [pid 6211] <... close resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6211] mkdir("./file1", 0777 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6211] <... mkdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5830] unlink("./73/binderfs" [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5832] unlink("./75/binderfs" [pid 5830] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... unlink resumed>) = 0 [pid 6211] <... mount resumed>) = 0 [pid 5832] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6212] <... ioctl resumed>) = 0 [pid 6212] close(3) = 0 [pid 6212] close(4 [pid 6211] <... openat resumed>) = 3 [pid 6211] chdir("./file1") = 0 [pid 6211] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6212] <... close resumed>) = 0 [pid 6211] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6210] <... sync resumed>) = 0 [pid 6212] mkdir("./file1", 0777) = 0 [pid 6211] chdir("./file0" [pid 6212] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6210] exit_group(0) = ? [pid 6211] <... chdir resumed>) = 0 [ 85.836161][ T6211] loop0: detected capacity change from 0 to 1024 [ 85.858372][ T6212] loop2: detected capacity change from 0 to 1024 [pid 6211] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5830] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6212] <... mount resumed>) = 0 [pid 6210] +++ exited with 0 +++ [pid 5832] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./73/file1", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6212] <... openat resumed>) = 3 [pid 6211] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] newfstatat(AT_FDCWD, "./75/file1", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6212] chdir("./file1" [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] <... creat resumed>) = 5 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6212] <... chdir resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6212] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6211] sync( [pid 5832] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6212] chdir("./file0" [pid 5833] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5833] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... openat resumed>) = 3 [pid 5832] getdents64(4, [pid 5830] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, [pid 5830] close(4 [pid 5833] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./73/file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] close(4 [pid 5830] <... rmdir resumed>) = 0 [pid 6212] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... close resumed>) = 0 [pid 6212] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] rmdir("./75/file1" [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./73" [pid 6212] <... openat resumed>) = 4 [pid 5833] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6212] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(3, [pid 6211] <... sync resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6211] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(3 [pid 5830] mkdir("./74", 0777 [pid 6211] <... exit_group resumed>) = ? [pid 5833] unlink("./73/binderfs" [pid 5832] <... close resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6211] +++ exited with 0 +++ [pid 6212] <... creat resumed>) = 5 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6212] sync( [pid 5833] <... unlink resumed>) = 0 [pid 5832] rmdir("./75" [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5830] close(3) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6213 attached [pid 6212] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6212] exit_group(0 [pid 5833] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] mkdir("./76", 0777 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] set_robust_list(0x555557df1660, 24 [pid 6212] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6213 [pid 5829] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6212] +++ exited with 0 +++ [pid 6213] <... set_robust_list resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./73/file1", [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... openat resumed>) = 3 [pid 6213] chdir("./74" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] newfstatat(3, "", [pid 6213] <... chdir resumed>) = 0 [pid 5833] umount2("./73/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... ioctl resumed>) = 0 [pid 5829] getdents64(3, [pid 6213] <... prctl resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6213] setpgid(0, 0 [pid 5833] <... openat resumed>) = 4 [pid 5829] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6213] <... setpgid resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6213] <... openat resumed>) = 3 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6213] write(3, "1000", 4 [pid 5833] <... close resumed>) = 0 [pid 5829] unlink("./74/binderfs" [pid 6213] <... write resumed>) = 4 [pid 5833] rmdir("./73/file1" [pid 5829] <... unlink resumed>) = 0 [pid 6213] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 6213] <... close resumed>) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs" [pid 5833] getdents64(3, [pid 5829] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./73" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6214 attached [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = 0 [pid 6214] set_robust_list(0x555557df1660, 24 [pid 6213] <... symlink resumed>) = 0 executing program [pid 5831] newfstatat(3, "", [pid 6214] <... set_robust_list resumed>) = 0 [pid 6213] write(1, "executing program\n", 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6214] chdir("./76" [pid 6213] <... write resumed>) = 18 [pid 5833] mkdir("./74", 0777 [pid 6214] <... chdir resumed>) = 0 [pid 6213] memfd_create("syzkaller", 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 6213] <... memfd_create resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6214 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6214] <... prctl resumed>) = 0 [pid 5831] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6214] setpgid(0, 0 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6214] <... setpgid resumed>) = 0 [pid 6213] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... openat resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] newfstatat(AT_FDCWD, "./74/file1", [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./74/file1") = 0 [pid 5829] getdents64(3, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6215 attached [pid 5829] close(3 [pid 6214] <... openat resumed>) = 3 [pid 5831] unlink("./74/binderfs" [pid 5829] <... close resumed>) = 0 [pid 6215] set_robust_list(0x555557df1660, 24) = 0 [pid 6215] chdir("./74" [pid 6214] write(3, "1000", 4 [pid 5831] <... unlink resumed>) = 0 [pid 5829] rmdir("./74" [pid 5831] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6214] <... write resumed>) = 4 [pid 6215] <... chdir resumed>) = 0 [pid 6214] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6215 [pid 5829] <... rmdir resumed>) = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6214] <... close resumed>) = 0 [pid 6215] <... prctl resumed>) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs" [pid 6215] setpgid(0, 0 [pid 5829] mkdir("./75", 0777 [pid 6215] <... setpgid resumed>) = 0 [pid 6214] <... symlink resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6215] write(3, "1000", 4executing program [pid 6214] write(1, "executing program\n", 18 [pid 6213] <... write resumed>) = 524288 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6215] <... write resumed>) = 4 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6215] close(3) = 0 [pid 6214] <... write resumed>) = 18 [pid 5831] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(3 [pid 6214] memfd_create("syzkaller", 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] symlink("/dev/binderfs", "./binderfs" [pid 5831] newfstatat(AT_FDCWD, "./74/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6214] <... memfd_create resumed>) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6215] <... symlink resumed>) = 0 [pid 6214] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5831] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6215] write(1, "executing program\n", 18) = 18 [pid 6215] memfd_create("syzkaller", 0 [pid 6213] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6215] <... memfd_create resumed>) = 3 [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6213] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6216 attached [pid 6214] <... write resumed>) = 524288 [pid 5831] getdents64(4, [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6216 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6216] set_robust_list(0x555557df1660, 24) = 0 [pid 6216] chdir("./75" [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./74/file1" [pid 6216] <... chdir resumed>) = 0 [pid 6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... rmdir resumed>) = 0 [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 5831] getdents64(3, [pid 6216] setpgid(0, 0) = 0 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] <... write resumed>) = 524288 [pid 6216] write(3, "1000", 4) = 4 [pid 6216] close(3) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6216] write(1, "executing program\n", 18) = 18 [pid 6216] memfd_create("syzkaller", 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6216] <... memfd_create resumed>) = 3 [pid 6213] <... ioctl resumed>) = 0 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] close(3 [pid 6216] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... close resumed>) = 0 [pid 6215] munmap(0x7fd6d9800000, 138412032) = 0 [pid 5831] rmdir("./74" [pid 6214] munmap(0x7fd6d9800000, 138412032 [pid 6213] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5831] mkdir("./75", 0777 [pid 6215] ioctl(4, LOOP_SET_FD, 3 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6214] <... munmap resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6213] <... close resumed>) = 0 [pid 6215] <... ioctl resumed>) = 0 [pid 6216] <... write resumed>) = 524288 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6213] close(4 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6213] <... close resumed>) = 0 [pid 6215] close(3 [pid 6214] <... openat resumed>) = 4 [pid 6213] mkdir("./file1", 0777 [pid 5831] <... openat resumed>) = 3 [pid 6215] <... close resumed>) = 0 [ 86.061838][ T6213] loop1: detected capacity change from 0 to 1024 [ 86.099349][ T6215] loop4: detected capacity change from 0 to 1024 [pid 6214] ioctl(4, LOOP_SET_FD, 3 [pid 6216] munmap(0x7fd6d9800000, 138412032 [pid 6215] close(4 [pid 6213] <... mkdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 6216] <... munmap resumed>) = 0 [pid 6215] <... close resumed>) = 0 [pid 5831] close(3 [pid 6215] mkdir("./file1", 0777) = 0 [pid 6215] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... close resumed>) = 0 [pid 6215] <... mount resumed>) = 0 [pid 6216] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6214] <... ioctl resumed>) = 0 [pid 6213] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6215] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6217 attached [pid 6216] <... openat resumed>) = 4 [pid 6215] <... openat resumed>) = 3 [pid 6214] close(3 [pid 6217] set_robust_list(0x555557df1660, 24) = 0 [pid 6215] chdir("./file1" [pid 6214] <... close resumed>) = 0 [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 6215] <... chdir resumed>) = 0 [pid 6214] close(4 [pid 6217] chdir("./75" [pid 6215] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6217 [pid 6217] <... chdir resumed>) = 0 [pid 6215] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6215] chdir("./file0" [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] <... chdir resumed>) = 0 [pid 6214] <... close resumed>) = 0 [pid 6217] setpgid(0, 0 [pid 6216] <... ioctl resumed>) = 0 [pid 6215] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6214] mkdir("./file1", 0777 [pid 6217] <... setpgid resumed>) = 0 [pid 6216] close(3 [pid 6214] <... mkdir resumed>) = 0 [pid 6213] <... mount resumed>) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6216] <... close resumed>) = 0 [pid 6215] <... openat resumed>) = 4 [pid 6214] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6217] <... openat resumed>) = 3 [pid 6216] close(4 [pid 6215] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6217] write(3, "1000", 4 [pid 6213] <... openat resumed>) = 3 [pid 6216] <... close resumed>) = 0 [pid 6213] chdir("./file1" [pid 6217] <... write resumed>) = 4 [pid 6216] mkdir("./file1", 0777 [pid 6213] <... chdir resumed>) = 0 [pid 6217] close(3 [pid 6216] <... mkdir resumed>) = 0 [pid 6215] <... creat resumed>) = 5 [pid 6213] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6217] <... close resumed>) = 0 [pid 6216] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6214] <... mount resumed>) = 0 [pid 6213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6217] symlink("/dev/binderfs", "./binderfs" [pid 6215] sync( [pid 6214] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6213] chdir("./file0" [pid 6217] <... symlink resumed>) = 0 executing program [pid 6214] <... openat resumed>) = 3 [pid 6217] write(1, "executing program\n", 18 [pid 6214] chdir("./file1" [pid 6217] <... write resumed>) = 18 [pid 6214] <... chdir resumed>) = 0 [pid 6217] memfd_create("syzkaller", 0) = 3 [pid 6216] <... mount resumed>) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6213] <... chdir resumed>) = 0 [ 86.118783][ T6214] loop3: detected capacity change from 0 to 1024 [ 86.145692][ T6216] loop0: detected capacity change from 0 to 1024 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6216] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6216] <... openat resumed>) = 3 [pid 6213] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6216] chdir("./file1" [pid 6214] chdir("./file0" [pid 6216] <... chdir resumed>) = 0 [pid 6213] <... openat resumed>) = 4 [pid 6216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6213] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6216] chdir("./file0") = 0 [pid 6216] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6213] <... creat resumed>) = 5 [pid 6217] <... mmap resumed>) = 0x7fd6d9800000 [pid 6216] <... openat resumed>) = 4 [pid 6215] <... sync resumed>) = 0 [pid 6214] <... chdir resumed>) = 0 [pid 6213] sync( [pid 6216] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6215] exit_group(0 [pid 6214] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6215] <... exit_group resumed>) = ? [pid 6216] <... creat resumed>) = 5 [pid 6215] +++ exited with 0 +++ [pid 6214] <... openat resumed>) = 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6216] sync( [pid 6214] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6213] <... sync resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6213] exit_group(0) = ? [pid 5833] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6214] <... creat resumed>) = 5 [pid 6213] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6214] sync( [pid 6217] <... write resumed>) = 524288 [pid 6216] <... sync resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] munmap(0x7fd6d9800000, 138412032 [pid 6216] exit_group(0 [pid 5833] <... openat resumed>) = 3 [pid 6217] <... munmap resumed>) = 0 [pid 6217] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6216] <... exit_group resumed>) = ? [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6214] <... sync resumed>) = 0 [pid 6214] exit_group(0 [pid 6217] <... openat resumed>) = 4 [pid 6216] +++ exited with 0 +++ [pid 5833] getdents64(3, [pid 5830] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 6214] <... exit_group resumed>) = ? [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 6217] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] close(3 [pid 6214] +++ exited with 0 +++ [pid 5833] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... openat resumed>) = 3 [pid 6217] close(4 [pid 5833] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5830] newfstatat(3, "", [pid 6217] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] mkdir("./file1", 0777 [pid 5833] unlink("./74/binderfs" [pid 5830] getdents64(3, [pid 5829] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] <... mkdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6217] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5830] unlink("./74/binderfs" [pid 5829] newfstatat(3, "", [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 6217] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./74/file1", [pid 5832] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] chdir("./file1" [pid 5830] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6217] chdir("./file0" [pid 5833] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] newfstatat(3, "", [pid 5833] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 5833] getdents64(4, [pid 5829] unlink("./75/binderfs" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./76/binderfs", [pid 5833] close(4) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(AT_FDCWD, "./74/file1", [pid 5829] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./74/file1" [pid 5832] unlink("./76/binderfs" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./74/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] close(3 [pid 5830] <... openat resumed>) = 4 [pid 6217] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... close resumed>) = 0 [ 86.273569][ T6217] loop2: detected capacity change from 0 to 1024 [pid 5830] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = 0 [pid 5833] rmdir("./74" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... openat resumed>) = 4 [pid 5830] close(4 [pid 5829] newfstatat(AT_FDCWD, "./75/file1", [pid 6217] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] mkdir("./75", 0777 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] rmdir("./74/file1") = 0 [pid 5829] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... mkdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] getdents64(3, [pid 5829] newfstatat(4, "", [pid 6217] <... creat resumed>) = 5 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./76/file1", [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6217] sync( [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] close(3 [pid 5829] getdents64(4, [pid 5833] <... ioctl resumed>) = 0 [pid 5832] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./74" [pid 5829] getdents64(4, [pid 5832] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./75/file1" [pid 5830] mkdir("./75", 0777 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5829] getdents64(3, [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3 [pid 6217] <... sync resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6217] exit_group(0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] close(3) = 0 [pid 5832] getdents64(4, [pid 5829] rmdir("./75" [pid 6217] <... exit_group resumed>) = ? [pid 5829] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6218 attached [pid 6217] +++ exited with 0 +++ [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] mkdir("./76", 0777 [pid 6218] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6218 [pid 5832] getdents64(4, [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6218] <... set_robust_list resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6218] chdir("./75" [pid 5832] close(4 [pid 5829] <... mkdir resumed>) = 0 [pid 6218] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5832] rmdir("./76/file1" [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 6218] <... prctl resumed>) = 0 [pid 5832] getdents64(3, [pid 5829] <... openat resumed>) = 3 [pid 6218] setpgid(0, 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6218] <... setpgid resumed>) = 0 [pid 5832] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... ioctl resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] rmdir("./76" [pid 5831] <... openat resumed>) = 3 [pid 5829] close(3./strace-static-x86_64: Process 6219 attached [pid 6219] set_robust_list(0x555557df1660, 24 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6219 [pid 5829] <... close resumed>) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6218] <... openat resumed>) = 3 [pid 5832] mkdir("./77", 0777 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6219] chdir("./75" [pid 6218] write(3, "1000", 4 [pid 5831] getdents64(3, [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6218] <... write resumed>) = 4 [pid 6218] close(3 [pid 5831] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6218] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] symlink("/dev/binderfs", "./binderfs" [pid 5831] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6219] <... chdir resumed>) = 0 [pid 6218] <... symlink resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... openat resumed>) = 3 [pid 6219] <... prctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] unlink("./75/binderfs" [pid 6219] setpgid(0, 0 [pid 5832] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6220 attached [pid 6219] <... setpgid resumed>) = 0 [pid 5832] close(3 [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6220 [pid 6220] set_robust_list(0x555557df1660, 24) = 0 [pid 6220] chdir("./76" [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6218] write(1, "executing program\n", 18executing program [pid 5832] <... close resumed>) = 0 [pid 5831] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6218] <... write resumed>) = 18 [pid 6220] <... chdir resumed>) = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6219] <... openat resumed>) = 3 [pid 6218] memfd_create("syzkaller", 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6218] <... memfd_create resumed>) = 3 [pid 6219] write(3, "1000", 4./strace-static-x86_64: Process 6221 attached [pid 6220] <... prctl resumed>) = 0 [pid 6219] <... write resumed>) = 4 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6219] close(3 [pid 6218] <... mmap resumed>) = 0x7fd6d9800000 [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6219] <... close resumed>) = 0 [pid 6221] set_robust_list(0x555557df1660, 24 [pid 6219] symlink("/dev/binderfs", "./binderfs" [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6221 [pid 5831] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6221] <... set_robust_list resumed>) = 0 [pid 6221] chdir("./77" [pid 6220] <... openat resumed>) = 3 [pid 6219] <... symlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs" [pid 6221] <... chdir resumed>) = 0 [pid 6220] <... symlink resumed>) = 0 executing program [pid 6219] write(1, "executing program\n", 18 [pid 5831] newfstatat(AT_FDCWD, "./75/file1", [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6219] <... write resumed>) = 18 [pid 6221] <... prctl resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6221] setpgid(0, 0 [pid 6220] write(1, "executing program\n", 18 [pid 6219] memfd_create("syzkaller", 0 [pid 5831] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6221] <... setpgid resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] <... write resumed>) = 18 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6220] memfd_create("syzkaller", 0 [pid 5831] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6221] <... openat resumed>) = 3 [pid 6220] <... memfd_create resumed>) = 3 [pid 6221] write(3, "1000", 4 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... openat resumed>) = 4 [pid 6220] <... mmap resumed>) = 0x7fd6d9800000 [pid 6221] <... write resumed>) = 4 [pid 6220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6219] <... memfd_create resumed>) = 3 [pid 6218] <... write resumed>) = 524288 [pid 5831] newfstatat(4, "", [pid 6221] close(3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 6221] <... close resumed>) = 0 [pid 6219] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6220] <... write resumed>) = 524288 [pid 6221] symlink("/dev/binderfs", "./binderfs" [pid 6220] munmap(0x7fd6d9800000, 138412032 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6218] munmap(0x7fd6d9800000, 138412032executing program [pid 5831] getdents64(4, [pid 6221] <... symlink resumed>) = 0 [pid 6220] <... munmap resumed>) = 0 [pid 6218] <... munmap resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6221] write(1, "executing program\n", 18 [pid 6218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] close(4 [pid 6221] <... write resumed>) = 18 [pid 6218] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 6221] memfd_create("syzkaller", 0 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 5831] rmdir("./75/file1" [pid 6221] <... memfd_create resumed>) = 3 [pid 6220] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6219] <... write resumed>) = 524288 [pid 6220] <... openat resumed>) = 4 [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6219] munmap(0x7fd6d9800000, 138412032 [pid 6218] <... ioctl resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6221] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] getdents64(3, [pid 6220] <... ioctl resumed>) = 0 [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6220] close(3 [pid 6219] <... munmap resumed>) = 0 [pid 6218] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6220] <... close resumed>) = 0 [pid 5831] close(3 [pid 6220] close(4 [pid 6219] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6218] <... close resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 6218] close(4 [pid 5831] <... close resumed>) = 0 [pid 6219] <... openat resumed>) = 4 [pid 6221] <... write resumed>) = 524288 [pid 6220] mkdir("./file1", 0777 [pid 6218] <... close resumed>) = 0 [pid 5831] rmdir("./75") = 0 [pid 6220] <... mkdir resumed>) = 0 [ 86.467287][ T6218] loop4: detected capacity change from 0 to 1024 [ 86.469983][ T6220] loop0: detected capacity change from 0 to 1024 [pid 5831] mkdir("./76", 0777) = 0 [pid 6221] munmap(0x7fd6d9800000, 138412032 [pid 6220] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6219] ioctl(4, LOOP_SET_FD, 3 [pid 6218] mkdir("./file1", 0777 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6221] <... munmap resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6218] <... mkdir resumed>) = 0 [pid 6221] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... ioctl resumed>) = 0 [pid 6221] <... openat resumed>) = 4 [pid 6218] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] close(3 [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6220] <... mount resumed>) = 0 [pid 6221] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6222 attached [pid 6220] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6219] <... ioctl resumed>) = 0 [pid 6218] <... mount resumed>) = 0 [pid 6222] set_robust_list(0x555557df1660, 24 [pid 6220] <... openat resumed>) = 3 [pid 6218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6222 [pid 6222] <... set_robust_list resumed>) = 0 [pid 6221] close(3 [pid 6220] chdir("./file1" [pid 6219] close(3 [pid 6218] <... openat resumed>) = 3 [pid 6222] chdir("./76" [pid 6221] <... close resumed>) = 0 [pid 6220] <... chdir resumed>) = 0 [pid 6219] <... close resumed>) = 0 [pid 6218] chdir("./file1" [pid 6222] <... chdir resumed>) = 0 [pid 6221] close(4 [pid 6220] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6219] close(4 [pid 6218] <... chdir resumed>) = 0 [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6221] <... close resumed>) = 0 [pid 6220] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6219] <... close resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6222] <... prctl resumed>) = 0 [pid 6221] mkdir("./file1", 0777 [pid 6220] chdir("./file0" [pid 6219] mkdir("./file1", 0777 [pid 6222] setpgid(0, 0 [pid 6218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6218] chdir("./file0" [pid 6222] <... setpgid resumed>) = 0 [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6218] <... chdir resumed>) = 0 [pid 6220] <... chdir resumed>) = 0 [pid 6222] <... openat resumed>) = 3 [pid 6221] <... mkdir resumed>) = 0 [pid 6220] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6222] write(3, "1000", 4 [pid 6219] <... mkdir resumed>) = 0 [pid 6222] <... write resumed>) = 4 [pid 6221] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6220] <... openat resumed>) = 4 [pid 6218] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6222] close(3 [pid 6220] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6219] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6218] <... openat resumed>) = 4 [pid 6222] <... close resumed>) = 0 [pid 6220] <... creat resumed>) = 5 [pid 6222] symlink("/dev/binderfs", "./binderfs" [pid 6220] sync( [pid 6222] <... symlink resumed>) = 0 [ 86.511135][ T6219] loop1: detected capacity change from 0 to 1024 [ 86.532371][ T6221] loop3: detected capacity change from 0 to 1024 [pid 6218] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6222] write(1, "executing program\n", 18 [pid 6221] <... mount resumed>) = 0 [pid 6218] <... creat resumed>) = 5 [pid 6221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 executing program [pid 6222] <... write resumed>) = 18 [pid 6221] chdir("./file1") = 0 [pid 6218] sync( [pid 6222] memfd_create("syzkaller", 0 [pid 6221] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6222] <... memfd_create resumed>) = 3 [pid 6221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6221] chdir("./file0" [pid 6219] <... mount resumed>) = 0 [pid 6222] <... mmap resumed>) = 0x7fd6d9800000 [pid 6221] <... chdir resumed>) = 0 [pid 6219] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6221] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6219] chdir("./file1") = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6219] chdir("./file0" [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6221] <... openat resumed>) = 4 [pid 6221] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6219] <... chdir resumed>) = 0 [pid 6221] <... creat resumed>) = 5 [pid 6219] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6218] <... sync resumed>) = 0 [pid 6220] <... sync resumed>) = 0 [pid 6221] sync( [pid 6219] <... openat resumed>) = 4 [pid 6218] exit_group(0) = ? [pid 6219] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6220] exit_group(0) = ? [pid 6218] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ [pid 6219] <... creat resumed>) = 5 [pid 6222] <... write resumed>) = 524288 [pid 6219] sync( [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6222] munmap(0x7fd6d9800000, 138412032 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6222] <... munmap resumed>) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6222] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6221] <... sync resumed>) = 0 [pid 6219] <... sync resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6222] <... openat resumed>) = 4 [pid 6221] exit_group(0 [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 6219] exit_group(0 [pid 6221] <... exit_group resumed>) = ? [pid 6221] +++ exited with 0 +++ [pid 5833] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./75/binderfs") = 0 [pid 5833] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6222] <... ioctl resumed>) = 0 [pid 6219] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6222] close(3) = 0 [pid 6222] close(4) = 0 [pid 6219] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = 0 [pid 5829] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] mkdir("./file1", 0777 [pid 5833] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./75/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5829] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] close(4 [pid 5832] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5833] <... close resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] rmdir("./75/file1" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6222] <... mkdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(3, [pid 6222] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6222] <... mount resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6222] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] chdir("./file1" [pid 5833] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6222] <... chdir resumed>) = 0 [pid 5833] rmdir("./75" [pid 5832] unlink("./77/binderfs" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 5830] unlink("./75/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6222] chdir("./file0" [pid 5830] <... unlink resumed>) = 0 [pid 5829] unlink("./76/binderfs" [pid 5833] mkdir("./76", 0777 [pid 5832] <... unlink resumed>) = 0 [pid 5830] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6222] <... chdir resumed>) = 0 [ 86.653928][ T6222] loop2: detected capacity change from 0 to 1024 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6222] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5830] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... ioctl resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./75/file1", [pid 5829] newfstatat(AT_FDCWD, "./76/file1", [pid 5833] close(3 [pid 5832] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6222] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] umount2("./75/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] newfstatat(AT_FDCWD, "./77/file1", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 5832] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5829] getdents64(4, [pid 5832] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(4, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] close(4 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 6222] <... creat resumed>) = 5 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] rmdir("./76/file1" [pid 5832] newfstatat(4, "", ./strace-static-x86_64: Process 6223 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5830] getdents64(4, [pid 6223] set_robust_list(0x555557df1660, 24 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, [pid 6223] <... set_robust_list resumed>) = 0 [pid 6222] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6223 [pid 5832] getdents64(4, [pid 5830] close(4 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6223] chdir("./76" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] close(3 [pid 6223] <... chdir resumed>) = 0 [pid 5832] close(4 [pid 5830] rmdir("./75/file1" [pid 5829] <... close resumed>) = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] rmdir("./76" [pid 6223] <... prctl resumed>) = 0 [pid 5832] rmdir("./77/file1") = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6223] setpgid(0, 0) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6222] <... sync resumed>) = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(3, [pid 5829] mkdir("./77", 0777 [pid 6222] exit_group(0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6223] <... openat resumed>) = 3 [pid 6222] <... exit_group resumed>) = ? [pid 5832] close(3 [pid 6223] write(3, "1000", 4 [pid 6222] +++ exited with 0 +++ [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5829] <... mkdir resumed>) = 0 [pid 6223] <... write resumed>) = 4 [pid 5832] rmdir("./77" [pid 5830] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6223] close(3 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] rmdir("./75" [pid 6223] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6223] symlink("/dev/binderfs", "./binderfs" [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6223] <... symlink resumed>) = 0 [pid 5832] mkdir("./78", 0777 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6223] write(1, "executing program\n", 18 [pid 5829] close(3executing program [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6223] <... write resumed>) = 18 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 6223] memfd_create("syzkaller", 0 [pid 5830] mkdir("./76", 0777 [pid 5831] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] newfstatat(3, "", [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6223] <... memfd_create resumed>) = 3 [pid 5832] close(3 [pid 5831] getdents64(3, [pid 5830] <... mkdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./76/binderfs" [pid 6223] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5831] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6224 attached [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6225 attached [pid 5831] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6225] set_robust_list(0x555557df1660, 24 [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5830] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6225 [pid 5831] getdents64(4, [pid 6225] <... set_robust_list resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6225] chdir("./78" [pid 5831] getdents64(4, [pid 6224] set_robust_list(0x555557df1660, 24 [pid 6223] <... write resumed>) = 524288 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6224 [pid 6224] <... set_robust_list resumed>) = 0 [pid 6223] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 6225] <... chdir resumed>) = 0 [pid 6224] chdir("./77" [pid 5831] close(4 [pid 5830] close(3 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... close resumed>) = 0 [pid 6225] <... prctl resumed>) = 0 [pid 5831] rmdir("./76/file1" [pid 6223] <... munmap resumed>) = 0 [pid 6225] setpgid(0, 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6225] <... setpgid resumed>) = 0 [pid 5831] getdents64(3, [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6225] <... openat resumed>) = 3 [pid 5831] close(3 [pid 6225] write(3, "1000", 4 [pid 5831] <... close resumed>) = 0 [pid 6225] <... write resumed>) = 4 [pid 5831] rmdir("./76" [pid 5830] <... close resumed>) = 0 [pid 6224] <... chdir resumed>) = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6225] close(3 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... rmdir resumed>) = 0 [pid 6224] <... prctl resumed>) = 0 [pid 6223] <... openat resumed>) = 4 [pid 6225] <... close resumed>) = 0 executing program [pid 6224] setpgid(0, 0 [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6225] symlink("/dev/binderfs", "./binderfs" [pid 6224] <... setpgid resumed>) = 0 [pid 5831] mkdir("./77", 0777 [pid 6225] <... symlink resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6225] write(1, "executing program\n", 18 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6225] <... write resumed>) = 18 [pid 5831] <... openat resumed>) = 3 [pid 6225] memfd_create("syzkaller", 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6225] <... memfd_create resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] close(3 [pid 6225] <... mmap resumed>) = 0x7fd6d9800000 [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6223] <... ioctl resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6224] <... openat resumed>) = 3 [pid 6224] write(3, "1000", 4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6226 [pid 6224] <... write resumed>) = 4 [pid 5831] <... close resumed>) = 0 ./strace-static-x86_64: Process 6226 attached [pid 6224] close(3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6224] <... close resumed>) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6223] close(3./strace-static-x86_64: Process 6227 attached [pid 6226] set_robust_list(0x555557df1660, 24 [pid 6223] <... close resumed>) = 0 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6226] chdir("./76") = 0 executing program [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6223] close(4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6227 [pid 6224] write(1, "executing program\n", 18 [pid 6227] set_robust_list(0x555557df1660, 24 [pid 6226] <... prctl resumed>) = 0 [pid 6224] <... write resumed>) = 18 [pid 6223] <... close resumed>) = 0 [pid 6227] <... set_robust_list resumed>) = 0 [pid 6226] setpgid(0, 0 [pid 6227] chdir("./77" [pid 6226] <... setpgid resumed>) = 0 [pid 6224] memfd_create("syzkaller", 0 [pid 6223] mkdir("./file1", 0777 [pid 6227] <... chdir resumed>) = 0 [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6223] <... mkdir resumed>) = 0 [pid 6224] <... memfd_create resumed>) = 3 [pid 6223] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6226] <... openat resumed>) = 3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] <... prctl resumed>) = 0 [pid 6226] write(3, "1000", 4 [pid 6227] setpgid(0, 0 [pid 6224] <... mmap resumed>) = 0x7fd6d9800000 [pid 6227] <... setpgid resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6226] <... write resumed>) = 4 [pid 6226] close(3executing program executing program [pid 6227] <... openat resumed>) = 3 [pid 6226] <... close resumed>) = 0 [pid 6225] <... write resumed>) = 524288 [pid 6227] write(3, "1000", 4 [pid 6226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] <... write resumed>) = 4 [pid 6227] close(3 [pid 6226] write(1, "executing program\n", 18 [pid 6227] <... close resumed>) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6226] <... write resumed>) = 18 [pid 6227] write(1, "executing program\n", 18 [pid 6226] memfd_create("syzkaller", 0 [pid 6227] <... write resumed>) = 18 [pid 6226] <... memfd_create resumed>) = 3 [pid 6227] memfd_create("syzkaller", 0 [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6227] <... memfd_create resumed>) = 3 [pid 6225] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [ 86.818400][ T6223] loop4: detected capacity change from 0 to 1024 [pid 6225] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6225] ioctl(4, LOOP_SET_FD, 3 [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6225] <... ioctl resumed>) = 0 [pid 6224] <... write resumed>) = 524288 [pid 6223] <... mount resumed>) = 0 [pid 6226] <... write resumed>) = 524288 [pid 6223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6225] close(3 [pid 6224] munmap(0x7fd6d9800000, 138412032 [pid 6223] chdir("./file1" [pid 6225] <... close resumed>) = 0 [pid 6225] close(4) = 0 [pid 6224] <... munmap resumed>) = 0 [pid 6223] <... chdir resumed>) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6225] mkdir("./file1", 0777) = 0 [pid 6224] <... openat resumed>) = 4 [pid 6223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6225] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6224] ioctl(4, LOOP_SET_FD, 3 [pid 6223] chdir("./file0" [pid 6226] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6226] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6226] ioctl(4, LOOP_SET_FD, 3 [pid 6227] <... write resumed>) = 524288 [pid 6227] munmap(0x7fd6d9800000, 138412032 [pid 6226] <... ioctl resumed>) = 0 [pid 6224] <... ioctl resumed>) = 0 [pid 6223] <... chdir resumed>) = 0 [pid 6227] <... munmap resumed>) = 0 [pid 6226] close(3 [pid 6225] <... mount resumed>) = 0 [pid 6224] close(3 [pid 6223] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6226] <... close resumed>) = 0 [pid 6225] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6224] <... close resumed>) = 0 [pid 6223] <... openat resumed>) = 4 [pid 6227] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6226] close(4 [pid 6225] <... openat resumed>) = 3 [pid 6224] close(4 [pid 6223] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6227] <... openat resumed>) = 4 [pid 6226] <... close resumed>) = 0 [pid 6225] chdir("./file1" [pid 6224] <... close resumed>) = 0 [pid 6227] ioctl(4, LOOP_SET_FD, 3 [pid 6226] mkdir("./file1", 0777 [pid 6224] mkdir("./file1", 0777 [pid 6226] <... mkdir resumed>) = 0 [pid 6225] <... chdir resumed>) = 0 [pid 6224] <... mkdir resumed>) = 0 [pid 6225] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6225] chdir("./file0" [pid 6223] <... creat resumed>) = 5 [pid 6226] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6224] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [ 86.862400][ T6225] loop3: detected capacity change from 0 to 1024 [ 86.898139][ T6224] loop0: detected capacity change from 0 to 1024 [ 86.900306][ T6226] loop1: detected capacity change from 0 to 1024 [pid 6223] sync( [pid 6225] <... chdir resumed>) = 0 [pid 6225] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6225] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6224] <... mount resumed>) = 0 [pid 6226] <... mount resumed>) = 0 [pid 6224] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6226] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6224] <... openat resumed>) = 3 [pid 6226] <... openat resumed>) = 3 [pid 6225] <... creat resumed>) = 5 [pid 6224] chdir("./file1" [pid 6226] chdir("./file1" [pid 6225] sync( [pid 6224] <... chdir resumed>) = 0 [pid 6226] <... chdir resumed>) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6224] chdir("./file0" [pid 6227] <... ioctl resumed>) = 0 [pid 6226] chdir("./file0" [pid 6227] close(3) = 0 [pid 6227] close(4) = 0 [pid 6224] <... chdir resumed>) = 0 [pid 6227] mkdir("./file1", 0777 [pid 6226] <... chdir resumed>) = 0 [pid 6224] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6227] <... mkdir resumed>) = 0 [pid 6226] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6224] <... openat resumed>) = 4 [pid 6227] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6226] <... openat resumed>) = 4 [pid 6224] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 86.927883][ T6227] loop2: detected capacity change from 0 to 1024 [pid 6226] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6224] <... creat resumed>) = 5 [pid 6226] <... creat resumed>) = 5 [pid 6224] sync( [pid 6226] sync( [pid 6227] <... mount resumed>) = 0 [pid 6227] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6227] chdir("./file1") = 0 [pid 6227] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6227] chdir("./file0" [pid 6225] <... sync resumed>) = 0 [pid 6223] <... sync resumed>) = 0 [pid 6227] <... chdir resumed>) = 0 [pid 6225] exit_group(0 [pid 6223] exit_group(0 [pid 6227] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6225] <... exit_group resumed>) = ? [pid 6223] <... exit_group resumed>) = ? [pid 6226] <... sync resumed>) = 0 [pid 6226] exit_group(0 [pid 6224] <... sync resumed>) = 0 [pid 6226] <... exit_group resumed>) = ? [pid 6224] exit_group(0 [pid 6226] +++ exited with 0 +++ [pid 6224] <... exit_group resumed>) = ? [pid 6223] +++ exited with 0 +++ [pid 6225] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6227] <... openat resumed>) = 4 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6224, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6227] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6227] <... creat resumed>) = 5 [pid 5833] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] sync( [pid 5833] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 3 [pid 5830] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5833] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] getdents64(3, [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] getdents64(3, [pid 5829] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./78/binderfs" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./76/binderfs", [pid 5830] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./76/binderfs" [pid 5832] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./76/binderfs", [pid 5829] unlink("./77/binderfs" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./76/binderfs" [pid 5833] <... unlink resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./78/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./76/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./77/file1", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... sync resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] exit_group(0 [pid 5833] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 6227] <... exit_group resumed>) = ? [pid 5833] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 6227] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5830] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] newfstatat(AT_FDCWD, "./76/file1", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5832] close(4 [pid 5830] umount2("./76/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5833] rmdir("./76/file1" [pid 5832] rmdir("./78/file1" [pid 5830] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] rmdir("./77/file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5833] getdents64(3, [pid 5832] getdents64(3, [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] getdents64(3, [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5832] close(3 [pid 5830] getdents64(4, [pid 5829] close(3 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... close resumed>) = 0 [pid 5833] rmdir("./76" [pid 5832] rmdir("./78" [pid 5831] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] rmdir("./77" [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] mkdir("./77", 0777 [pid 5832] mkdir("./79", 0777 [pid 5831] newfstatat(3, "", [pid 5830] close(4 [pid 5829] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] rmdir("./76/file1" [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] mkdir("./78", 0777 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] getdents64(3, [pid 5833] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5833] close(3 [pid 5830] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] rmdir("./76" [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... ioctl resumed>) = 0 [pid 5831] unlink("./77/binderfs" [pid 5832] close(3 [pid 5829] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5830] mkdir("./77", 0777./strace-static-x86_64: Process 6228 attached [pid 5831] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6228] set_robust_list(0x555557df1660, 24 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 6228] <... set_robust_list resumed>) = 0 [pid 5829] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6228 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] close(3./strace-static-x86_64: Process 6229 attached [pid 6228] chdir("./77" [pid 5830] <... close resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 6229] set_robust_list(0x555557df1660, 24 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6229 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... umount2 resumed>) = 0 [pid 6228] <... prctl resumed>) = 0 [pid 6229] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6230 attached [pid 6229] chdir("./79" [pid 6228] setpgid(0, 0 [pid 5831] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6229] <... chdir resumed>) = 0 [pid 6228] <... setpgid resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6230] set_robust_list(0x555557df1660, 24 [pid 6229] <... prctl resumed>) = 0 [pid 6228] <... openat resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./77/file1", [pid 6230] <... set_robust_list resumed>) = 0 [pid 6230] chdir("./77" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6231 attached [pid 6229] setpgid(0, 0 [pid 6228] write(3, "1000", 4 [pid 5831] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6231] set_robust_list(0x555557df1660, 24 [pid 6229] <... setpgid resumed>) = 0 [pid 6228] <... write resumed>) = 4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6231 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] close(3 [pid 6230] <... chdir resumed>) = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6228] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6228] symlink("/dev/binderfs", "./binderfs" [pid 6231] chdir("./78" [pid 6230] <... prctl resumed>) = 0 [pid 6229] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 4 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6230 [pid 6231] <... chdir resumed>) = 0 [pid 6230] setpgid(0, 0 [pid 6229] write(3, "1000", 4 [pid 6228] <... symlink resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6230] <... setpgid resumed>) = 0 [pid 6229] <... write resumed>) = 4 [pid 6228] write(1, "executing program\n", 18executing program [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6231] <... prctl resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6229] close(3 [pid 6228] <... write resumed>) = 18 [pid 5831] getdents64(4, [pid 6230] <... openat resumed>) = 3 [pid 6229] <... close resumed>) = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6230] write(3, "1000", 4 [pid 6229] symlink("/dev/binderfs", "./binderfs" [pid 6231] setpgid(0, 0 [pid 6230] <... write resumed>) = 4 [pid 5831] getdents64(4, [pid 6231] <... setpgid resumed>) = 0 [pid 6230] close(3 [pid 6229] <... symlink resumed>) = 0 [pid 6228] <... memfd_create resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6230] <... close resumed>) = 0 [pid 5831] close(4 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6230] symlink("/dev/binderfs", "./binderfs" [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... close resumed>) = 0 [pid 6230] <... symlink resumed>) = 0 executing program [pid 6230] write(1, "executing program\n", 18 [pid 6231] <... openat resumed>) = 3 [pid 6230] <... write resumed>) = 18 executing program [pid 6229] write(1, "executing program\n", 18 [pid 6228] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] rmdir("./77/file1" [pid 6230] memfd_create("syzkaller", 0 [pid 6229] <... write resumed>) = 18 [pid 6230] <... memfd_create resumed>) = 3 [pid 5831] <... rmdir resumed>) = 0 [pid 6231] write(3, "1000", 4 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6229] memfd_create("syzkaller", 0 [pid 6231] <... write resumed>) = 4 [pid 6230] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] getdents64(3, [pid 6231] close(3 [pid 6229] <... memfd_create resumed>) = 3 [pid 6231] <... close resumed>) = 0 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 6229] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./77") = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 5831] mkdir("./78", 0777 [pid 6231] <... symlink resumed>) = 0 executing program [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... mkdir resumed>) = 0 [pid 6231] write(1, "executing program\n", 18) = 18 [pid 6231] memfd_create("syzkaller", 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6231] <... memfd_create resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6231] <... mmap resumed>) = 0x7fd6d9800000 [pid 6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6230] <... write resumed>) = 524288 [pid 6230] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... ioctl resumed>) = 0 [pid 6230] <... openat resumed>) = 4 [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6228] <... write resumed>) = 524288 [pid 5831] close(3 [pid 6228] munmap(0x7fd6d9800000, 138412032 [pid 6230] <... ioctl resumed>) = 0 [pid 6231] <... write resumed>) = 524288 [pid 6229] <... write resumed>) = 524288 [pid 5831] <... close resumed>) = 0 [pid 6229] munmap(0x7fd6d9800000, 138412032 [pid 6230] close(3 [pid 6229] <... munmap resumed>) = 0 [pid 6230] <... close resumed>) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6230] close(4 [pid 6229] <... openat resumed>) = 4 [pid 6228] <... munmap resumed>) = 0 [pid 6230] <... close resumed>) = 0 [pid 6229] ioctl(4, LOOP_SET_FD, 3 [pid 6228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6230] mkdir("./file1", 0777 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6230] <... mkdir resumed>) = 0 [pid 6228] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6232 attached [pid 6231] munmap(0x7fd6d9800000, 138412032 [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6231] <... munmap resumed>) = 0 [pid 6230] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6231] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6232] set_robust_list(0x555557df1660, 24 [pid 6231] <... openat resumed>) = 4 [pid 6230] <... mount resumed>) = 0 [pid 6229] <... ioctl resumed>) = 0 [pid 6228] <... ioctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6232 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6231] ioctl(4, LOOP_SET_FD, 3 [pid 6230] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6229] close(3 [pid 6228] close(3 [pid 6232] chdir("./78") = 0 [ 87.224381][ T6230] loop1: detected capacity change from 0 to 1024 [ 87.248141][ T6229] loop3: detected capacity change from 0 to 1024 [ 87.261571][ T6228] loop4: detected capacity change from 0 to 1024 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0 [pid 6231] <... ioctl resumed>) = 0 [pid 6230] <... openat resumed>) = 3 [pid 6229] <... close resumed>) = 0 [pid 6228] <... close resumed>) = 0 [pid 6232] <... setpgid resumed>) = 0 [pid 6230] chdir("./file1" [pid 6229] close(4 [pid 6228] close(4 [pid 6231] close(3 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6231] <... close resumed>) = 0 [pid 6230] <... chdir resumed>) = 0 [pid 6229] <... close resumed>) = 0 [pid 6228] <... close resumed>) = 0 [pid 6231] close(4 [pid 6232] <... openat resumed>) = 3 [pid 6231] <... close resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6228] mkdir("./file1", 0777 [pid 6232] write(3, "1000", 4 [pid 6231] mkdir("./file1", 0777 [pid 6229] mkdir("./file1", 0777 [pid 6232] <... write resumed>) = 4 [pid 6231] <... mkdir resumed>) = 0 [pid 6230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6229] <... mkdir resumed>) = 0 [pid 6232] close(3 [pid 6230] chdir("./file0" [pid 6228] <... mkdir resumed>) = 0 [pid 6231] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6232] <... close resumed>) = 0 executing program [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6228] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6229] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6232] <... symlink resumed>) = 0 [pid 6231] <... mount resumed>) = 0 [pid 6232] write(1, "executing program\n", 18 [pid 6231] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6232] <... write resumed>) = 18 [pid 6231] <... openat resumed>) = 3 [pid 6230] <... chdir resumed>) = 0 [pid 6231] chdir("./file1") = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6232] memfd_create("syzkaller", 0 [pid 6230] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6231] chdir("./file0" [pid 6230] <... openat resumed>) = 4 [pid 6232] <... memfd_create resumed>) = 3 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6231] <... chdir resumed>) = 0 [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6230] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6229] <... mount resumed>) = 0 [pid 6228] <... mount resumed>) = 0 [pid 6229] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6231] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6229] <... openat resumed>) = 3 [pid 6228] <... openat resumed>) = 3 [ 87.280496][ T6231] loop0: detected capacity change from 0 to 1024 [pid 6231] <... openat resumed>) = 4 [pid 6232] <... write resumed>) = 524288 [pid 6230] <... creat resumed>) = 5 [pid 6229] chdir("./file1" [pid 6228] chdir("./file1" [pid 6231] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6230] sync( [pid 6229] <... chdir resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6229] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6229] chdir("./file0") = 0 [pid 6228] chdir("./file0" [pid 6232] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6231] sync( [pid 6229] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6228] <... chdir resumed>) = 0 [pid 6232] <... openat resumed>) = 4 [pid 6229] <... openat resumed>) = 4 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 6229] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6228] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6230] <... sync resumed>) = 0 [pid 6230] exit_group(0) = ? [pid 6232] <... ioctl resumed>) = 0 [pid 6231] <... sync resumed>) = 0 [pid 6230] +++ exited with 0 +++ [pid 6229] <... creat resumed>) = 5 [pid 6228] <... openat resumed>) = 4 [pid 6232] close(3 [pid 6231] exit_group(0 [pid 6229] sync( [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6228] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6232] <... close resumed>) = 0 [pid 6232] close(4) = 0 [pid 6232] mkdir("./file1", 0777) = 0 [pid 6232] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6231] <... exit_group resumed>) = ? [pid 6228] <... creat resumed>) = 5 [pid 5830] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6228] sync( [pid 6229] <... sync resumed>) = 0 [pid 6231] +++ exited with 0 +++ [pid 6228] <... sync resumed>) = 0 [pid 6228] exit_group(0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6229] exit_group(0 [pid 6228] <... exit_group resumed>) = ? [pid 6229] <... exit_group resumed>) = ? [pid 5830] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6229] +++ exited with 0 +++ [pid 6228] +++ exited with 0 +++ [pid 5830] <... openat resumed>) = 3 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] newfstatat(3, "", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6232] <... mount resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... openat resumed>) = 3 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5829] <... restart_syscall resumed>) = 0 [pid 6232] chdir("./file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 5830] unlink("./77/binderfs" [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 6232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6232] chdir("./file0" [pid 5832] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 87.359153][ T6232] loop2: detected capacity change from 0 to 1024 [pid 6232] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6232] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] getdents64(3, [pid 5832] getdents64(3, [pid 5829] newfstatat(3, "", [pid 6232] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6232] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] unlink("./77/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... unlink resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5830] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./79/binderfs" [pid 5829] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6232] <... creat resumed>) = 5 [pid 5832] <... unlink resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./77/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6232] sync( [pid 5832] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./78/binderfs" [pid 5833] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6232] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 6232] exit_group(0 [pid 5833] newfstatat(AT_FDCWD, "./77/file1", [pid 5832] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... exit_group resumed>) = ? [pid 5833] umount2("./77/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./79/file1", [pid 5830] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] newfstatat(4, "", [pid 5829] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(4, "", [pid 5832] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5832] newfstatat(4, "", [pid 5829] newfstatat(AT_FDCWD, "./78/file1", [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] getdents64(4, [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] getdents64(4, [pid 5831] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] close(4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] close(4 [pid 5831] <... openat resumed>) = 3 [pid 5830] getdents64(4, [pid 5829] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] rmdir("./77/file1" [pid 5832] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5831] newfstatat(3, "", [pid 5830] close(4 [pid 5832] rmdir("./79/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... rmdir resumed>) = 0 [pid 5830] rmdir("./77/file1" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(3, [pid 5833] close(3 [pid 5829] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] rmdir("./77" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(4, [pid 5831] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 5832] close(3 [pid 5829] close(4 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./78/file1" [pid 5832] <... close resumed>) = 0 [pid 5833] mkdir("./78", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./77" [pid 5829] <... rmdir resumed>) = 0 [pid 5832] rmdir("./79" [pid 5831] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5830] <... rmdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] mkdir("./78", 0777 [pid 5829] getdents64(3, [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] mkdir("./80", 0777 [pid 5831] unlink("./78/binderfs") = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5829] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] rmdir("./78" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... rmdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] mkdir("./79", 0777 [pid 5832] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 5829] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6233 attached [pid 5832] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6233] set_robust_list(0x555557df1660, 24) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6233 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] newfstatat(AT_FDCWD, "./78/file1", [pid 5829] <... openat resumed>) = 3 [pid 6233] chdir("./78" [pid 5830] <... close resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6233] <... chdir resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6234 attached [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6233] <... prctl resumed>) = 0 [pid 5829] close(3 [pid 6233] setpgid(0, 0 [pid 6234] set_robust_list(0x555557df1660, 24 [pid 6233] <... setpgid resumed>) = 0 [pid 5831] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6235 [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 6235 attached [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6234 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] <... set_robust_list resumed>) = 0 [pid 6233] <... openat resumed>) = 3 [pid 6234] chdir("./80" [pid 5831] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6235] set_robust_list(0x555557df1660, 24 [pid 6234] <... chdir resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 6235] <... set_robust_list resumed>) = 0 [pid 6233] write(3, "1000", 4 [pid 5831] newfstatat(4, "", [pid 6235] chdir("./78" [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... write resumed>) = 4 [pid 6234] <... prctl resumed>) = 0 [pid 6233] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] setpgid(0, 0 [pid 6233] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 6234] <... setpgid resumed>) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6235] <... chdir resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... symlink resumed>) = 0 [pid 5831] getdents64(4, [pid 6235] <... prctl resumed>) = 0 executing program [pid 6233] write(1, "executing program\n", 18 [pid 6235] setpgid(0, 0 [pid 6234] <... openat resumed>) = 3 [pid 6233] <... write resumed>) = 18 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6235] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6236 attached [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6233] memfd_create("syzkaller", 0 [pid 5831] close(4 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6236 [pid 6234] write(3, "1000", 4 [pid 5831] <... close resumed>) = 0 [pid 6234] <... write resumed>) = 4 [pid 5831] rmdir("./78/file1" [pid 6234] close(3 [pid 6233] <... memfd_create resumed>) = 3 [pid 6236] set_robust_list(0x555557df1660, 24 [pid 6235] <... openat resumed>) = 3 [pid 6234] <... close resumed>) = 0 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6236] <... set_robust_list resumed>) = 0 [pid 6235] write(3, "1000", 4 [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 6236] chdir("./79" [pid 6235] <... write resumed>) = 4 [pid 6233] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] getdents64(3, [pid 6235] close(3 [pid 6234] <... symlink resumed>) = 0 [pid 6236] <... chdir resumed>) = 0 [pid 6235] <... close resumed>) = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6236] <... prctl resumed>) = 0 [pid 6235] <... symlink resumed>) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6235] write(1, "executing program\n", 18executing program ) = 18 [pid 6236] <... openat resumed>) = 3 [pid 6235] memfd_create("syzkaller", 0) = 3 [pid 6236] write(3, "1000", 4 [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6236] <... write resumed>) = 4 [pid 6235] <... mmap resumed>) = 0x7fd6d9800000 [pid 6236] close(3) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 executing program [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6236] write(1, "executing program\n", 18) = 18 [pid 6236] memfd_create("syzkaller", 0) = 3 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288executing program [pid 6234] write(1, "executing program\n", 18 [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] close(3 [pid 6234] <... write resumed>) = 18 [pid 5831] <... close resumed>) = 0 [pid 6234] memfd_create("syzkaller", 0 [pid 5831] rmdir("./78") = 0 [pid 6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6234] <... memfd_create resumed>) = 3 [pid 5831] mkdir("./79", 0777 [pid 6236] <... write resumed>) = 524288 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6233] <... write resumed>) = 524288 [pid 6235] munmap(0x7fd6d9800000, 138412032 [pid 6234] <... mmap resumed>) = 0x7fd6d9800000 [pid 6235] <... munmap resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6235] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6233] munmap(0x7fd6d9800000, 138412032 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6236] munmap(0x7fd6d9800000, 138412032 [pid 6233] <... munmap resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 6236] <... munmap resumed>) = 0 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6233] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6233] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 6233] ioctl(4, LOOP_SET_FD, 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6235] close(3) = 0 [pid 6235] close(4) = 0 [pid 6235] mkdir("./file1", 0777./strace-static-x86_64: Process 6237 attached ) = 0 [pid 6234] <... write resumed>) = 524288 [pid 6235] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6237] set_robust_list(0x555557df1660, 24 [pid 6234] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6237 [pid 6234] <... munmap resumed>) = 0 [pid 6237] <... set_robust_list resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6233] <... ioctl resumed>) = 0 [pid 6237] chdir("./79" [pid 6236] <... ioctl resumed>) = 0 [pid 6234] <... openat resumed>) = 4 [pid 6233] close(3 [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 6233] <... close resumed>) = 0 [ 87.603714][ T6235] loop1: detected capacity change from 0 to 1024 [ 87.616985][ T6236] loop0: detected capacity change from 0 to 1024 [ 87.627660][ T6233] loop4: detected capacity change from 0 to 1024 [pid 6237] <... chdir resumed>) = 0 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6236] close(3 [pid 6235] <... mount resumed>) = 0 [pid 6234] <... ioctl resumed>) = 0 [pid 6233] close(4 [pid 6237] <... prctl resumed>) = 0 [pid 6235] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6237] setpgid(0, 0 [pid 6236] <... close resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 6235] chdir("./file1" [pid 6237] <... setpgid resumed>) = 0 [pid 6236] close(4 [pid 6235] <... chdir resumed>) = 0 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6236] <... close resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6237] <... openat resumed>) = 3 [pid 6236] mkdir("./file1", 0777 [pid 6237] write(3, "1000", 4 [pid 6236] <... mkdir resumed>) = 0 [pid 6233] <... close resumed>) = 0 [pid 6237] <... write resumed>) = 4 [pid 6236] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6233] mkdir("./file1", 0777 [pid 6237] close(3 [pid 6235] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6233] <... mkdir resumed>) = 0 [pid 6235] chdir("./file0" [pid 6237] <... close resumed>) = 0 [pid 6233] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6235] <... chdir resumed>) = 0 executing program [pid 6237] write(1, "executing program\n", 18 [pid 6235] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6237] <... write resumed>) = 18 [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] <... openat resumed>) = 4 [pid 6235] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6237] <... mmap resumed>) = 0x7fd6d9800000 [pid 6236] <... mount resumed>) = 0 [pid 6236] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6236] chdir("./file1") = 0 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6236] chdir("./file0" [pid 6234] close(3 [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6236] <... chdir resumed>) = 0 [pid 6235] <... creat resumed>) = 5 [pid 6233] <... mount resumed>) = 0 [pid 6236] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6234] <... close resumed>) = 0 [pid 6233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6237] <... write resumed>) = 524288 [pid 6236] <... openat resumed>) = 4 [pid 6235] sync( [pid 6233] <... openat resumed>) = 3 [pid 6234] close(4 [pid 6233] chdir("./file1" [pid 6234] <... close resumed>) = 0 [pid 6233] <... chdir resumed>) = 0 [pid 6234] mkdir("./file1", 0777 [pid 6233] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6234] <... mkdir resumed>) = 0 [pid 6233] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6234] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6233] chdir("./file0" [pid 6236] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6233] <... chdir resumed>) = 0 [ 87.653225][ T6234] loop3: detected capacity change from 0 to 1024 [pid 6233] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6236] <... creat resumed>) = 5 [pid 6237] munmap(0x7fd6d9800000, 138412032 [pid 6234] <... mount resumed>) = 0 [pid 6233] <... openat resumed>) = 4 [pid 6237] <... munmap resumed>) = 0 [pid 6234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6233] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6236] sync( [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 6234] <... openat resumed>) = 3 [pid 6233] <... creat resumed>) = 5 [pid 6234] chdir("./file1" [pid 6233] sync( [pid 6234] <... chdir resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6234] chdir("./file0") = 0 [pid 6234] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6237] <... ioctl resumed>) = 0 [pid 6237] close(3) = 0 [pid 6237] close(4) = 0 [pid 6236] <... sync resumed>) = 0 [pid 6235] <... sync resumed>) = 0 [pid 6234] <... openat resumed>) = 4 [pid 6233] <... sync resumed>) = 0 [pid 6237] mkdir("./file1", 0777 [pid 6236] exit_group(0 [pid 6235] exit_group(0 [pid 6234] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6233] exit_group(0 [pid 6236] <... exit_group resumed>) = ? [pid 6235] <... exit_group resumed>) = ? [pid 6237] <... mkdir resumed>) = 0 [pid 6234] <... creat resumed>) = 5 [pid 6237] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6235] +++ exited with 0 +++ [pid 6234] sync( [pid 6236] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6233] <... exit_group resumed>) = ? [pid 6233] +++ exited with 0 +++ [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", [pid 5829] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 5829] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", [pid 5833] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5833] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] unlink("./78/binderfs" [pid 5830] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5833] <... unlink resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] unlink("./79/binderfs" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./78/binderfs") = 0 [ 87.728223][ T6237] loop2: detected capacity change from 0 to 1024 [pid 5830] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 6237] <... mount resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./78/file1", [pid 6234] <... sync resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./79/file1", [pid 5833] newfstatat(AT_FDCWD, "./78/file1", [pid 6237] <... openat resumed>) = 3 [pid 6237] chdir("./file1" [pid 6234] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6237] <... chdir resumed>) = 0 [pid 6234] <... exit_group resumed>) = ? [pid 5833] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./78/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 5830] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", [pid 6237] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6234] +++ exited with 0 +++ [pid 5833] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(4, "", [pid 6237] chdir("./file0" [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6237] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] getdents64(4, [pid 6237] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] getdents64(4, [pid 5832] <... openat resumed>) = 3 [pid 5829] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] close(4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5832] newfstatat(3, "", [pid 6237] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6237] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] close(4 [pid 5832] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./78/file1" [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... close resumed>) = 0 [pid 5829] close(4 [pid 5830] rmdir("./78/file1" [pid 5829] <... close resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] rmdir("./79/file1") = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5829] close(3 [pid 5830] <... close resumed>) = 0 [pid 6237] <... creat resumed>) = 5 [pid 5833] getdents64(3, [pid 5832] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 6237] sync( [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] rmdir("./78" [pid 5829] rmdir("./79" [pid 5833] close(3) = 0 [pid 5832] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] rmdir("./78" [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./80/binderfs" [pid 5830] mkdir("./79", 0777 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5829] mkdir("./80", 0777 [pid 5832] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] mkdir("./79", 0777 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6237] <... sync resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6237] exit_group(0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... umount2 resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6237] <... exit_group resumed>) = ? [pid 5832] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./80/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6237] +++ exited with 0 +++ [pid 5832] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... openat resumed>) = 3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 4 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... ioctl resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(3 [pid 5829] close(3 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./80/file1") = 0 [pid 5832] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6238 attached [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6239 attached [pid 5832] close(3) = 0 [pid 5832] rmdir("./80") = 0 [pid 6239] set_robust_list(0x555557df1660, 24./strace-static-x86_64: Process 6240 attached [pid 6238] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6239 [pid 5832] mkdir("./81", 0777 [pid 5831] newfstatat(3, "", [pid 6240] set_robust_list(0x555557df1660, 24 [pid 6239] <... set_robust_list resumed>) = 0 [pid 6238] <... set_robust_list resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6240 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6238 [pid 6240] <... set_robust_list resumed>) = 0 [pid 6239] chdir("./79" [pid 6238] chdir("./80" [pid 5832] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 6238] <... chdir resumed>) = 0 [pid 6240] chdir("./79" [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6239] <... chdir resumed>) = 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6240] <... chdir resumed>) = 0 [pid 6239] <... prctl resumed>) = 0 [pid 6239] setpgid(0, 0 [pid 6240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6240] setpgid(0, 0 [pid 6239] <... setpgid resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6240] <... setpgid resumed>) = 0 [pid 6238] <... prctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6239] <... openat resumed>) = 3 [pid 6238] setpgid(0, 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6240] <... openat resumed>) = 3 [pid 6239] write(3, "1000", 4 [pid 6238] <... setpgid resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] newfstatat(AT_FDCWD, "./79/binderfs", [pid 6240] write(3, "1000", 4 [pid 6239] <... write resumed>) = 4 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... ioctl resumed>) = 0 [pid 6240] <... write resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6240] close(3 [pid 6238] <... openat resumed>) = 3 [pid 5831] unlink("./79/binderfs" [pid 6238] write(3, "1000", 4 [pid 6239] close(3 [pid 6240] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6238] <... write resumed>) = 4 [pid 5831] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6238] close(3 [pid 6240] symlink("/dev/binderfs", "./binderfs" [pid 6239] <... close resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 5832] close(3 [pid 6238] symlink("/dev/binderfs", "./binderfs" [pid 6240] <... symlink resumed>) = 0 [pid 6238] <... symlink resumed>) = 0 [pid 6239] symlink("/dev/binderfs", "./binderfs"executing program [pid 6238] write(1, "executing program\n", 18 [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6239] <... symlink resumed>) = 0 [pid 6238] <... write resumed>) = 18 executing program [pid 6240] write(1, "executing program\n", 18 [pid 6238] memfd_create("syzkaller", 0 [pid 6240] <... write resumed>) = 18 [pid 6239] write(1, "executing program\n", 18 [pid 6238] <... memfd_create resumed>) = 3 [pid 5831] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6240] memfd_create("syzkaller", 0 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6241 attached [pid 6239] <... write resumed>) = 18 [pid 6240] <... memfd_create resumed>) = 3 [pid 6239] memfd_create("syzkaller", 0 [pid 6238] <... mmap resumed>) = 0x7fd6d9800000 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6239] <... memfd_create resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] set_robust_list(0x555557df1660, 24 [pid 6240] <... mmap resumed>) = 0x7fd6d9800000 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(AT_FDCWD, "./79/file1", [pid 6241] <... set_robust_list resumed>) = 0 [pid 6239] <... mmap resumed>) = 0x7fd6d9800000 [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6241] chdir("./81" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6241 [pid 5831] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6241] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6241] <... prctl resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 6241] setpgid(0, 0 [pid 5831] newfstatat(4, "", [pid 6241] <... setpgid resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] getdents64(4, [pid 6241] <... openat resumed>) = 3 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6241] write(3, "1000", 4 [pid 5831] getdents64(4, [pid 6241] <... write resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6241] close(3 [pid 5831] <... close resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 5831] rmdir("./79/file1" [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... rmdir resumed>) = 0 [pid 6241] <... symlink resumed>) = 0 [pid 5831] getdents64(3, [pid 6241] write(1, "executing program\n", 18 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 executing program [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6238] <... write resumed>) = 524288 [pid 6241] <... write resumed>) = 18 [pid 5831] close(3 [pid 6241] memfd_create("syzkaller", 0 [pid 6238] munmap(0x7fd6d9800000, 138412032 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./79") = 0 [pid 6241] <... memfd_create resumed>) = 3 [pid 6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] mkdir("./80", 0777) = 0 [pid 6241] <... mmap resumed>) = 0x7fd6d9800000 [pid 6239] <... write resumed>) = 524288 [pid 6238] <... munmap resumed>) = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6240] <... write resumed>) = 524288 [pid 6239] munmap(0x7fd6d9800000, 138412032 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6240] munmap(0x7fd6d9800000, 138412032 [pid 6239] <... munmap resumed>) = 0 [pid 6238] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6240] <... munmap resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 5831] close(3 [pid 6241] <... write resumed>) = 524288 [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6239] <... openat resumed>) = 4 [pid 5831] <... close resumed>) = 0 [pid 6241] munmap(0x7fd6d9800000, 138412032 [pid 6240] <... openat resumed>) = 4 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6241] <... munmap resumed>) = 0 [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6241] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 ./strace-static-x86_64: Process 6242 attached [pid 6241] ioctl(4, LOOP_SET_FD, 3 [pid 6242] set_robust_list(0x555557df1660, 24 [pid 6241] <... ioctl resumed>) = 0 [pid 6238] <... ioctl resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6242 [pid 6242] <... set_robust_list resumed>) = 0 [pid 6238] close(3 [pid 6242] chdir("./80" [pid 6241] close(3 [pid 6240] <... ioctl resumed>) = 0 [pid 6239] <... ioctl resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6242] <... chdir resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 6240] close(3 [pid 6239] close(3 [pid 6238] close(4 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6241] close(4 [pid 6240] <... close resumed>) = 0 [pid 6239] <... close resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6242] <... prctl resumed>) = 0 [pid 6240] close(4 [pid 6239] close(4 [pid 6238] mkdir("./file1", 0777 [pid 6241] <... close resumed>) = 0 [pid 6242] setpgid(0, 0 [pid 6240] <... close resumed>) = 0 [pid 6239] <... close resumed>) = 0 [pid 6238] <... mkdir resumed>) = 0 [pid 6242] <... setpgid resumed>) = 0 [pid 6238] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6241] mkdir("./file1", 0777 [pid 6240] mkdir("./file1", 0777 [pid 6239] mkdir("./file1", 0777 [pid 6242] <... openat resumed>) = 3 [pid 6241] <... mkdir resumed>) = 0 [pid 6240] <... mkdir resumed>) = 0 [pid 6239] <... mkdir resumed>) = 0 [pid 6240] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6239] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6241] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6242] write(3, "1000", 4 [pid 6241] <... mount resumed>) = 0 [pid 6240] <... mount resumed>) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6238] <... mount resumed>) = 0 [pid 6241] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6240] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6239] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6242] <... write resumed>) = 4 [pid 6241] <... openat resumed>) = 3 [pid 6240] <... openat resumed>) = 3 [pid 6239] <... openat resumed>) = 3 [pid 6238] <... openat resumed>) = 3 [pid 6242] close(3 [pid 6241] chdir("./file1" [pid 6240] chdir("./file1" [pid 6239] chdir("./file1" [pid 6238] chdir("./file1" [pid 6241] <... chdir resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 6239] <... chdir resumed>) = 0 [pid 6238] <... chdir resumed>) = 0 [pid 6241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6241] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 88.001881][ T6238] loop0: detected capacity change from 0 to 1024 [ 88.006363][ T6239] loop4: detected capacity change from 0 to 1024 [ 88.016224][ T6240] loop1: detected capacity change from 0 to 1024 [ 88.024590][ T6241] loop3: detected capacity change from 0 to 1024 [pid 6241] chdir("./file0" [pid 6242] <... close resumed>) = 0 [pid 6240] chdir("./file0" [pid 6239] chdir("./file0" [pid 6238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6242] symlink("/dev/binderfs", "./binderfs" [pid 6238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6242] <... symlink resumed>) = 0 [pid 6238] chdir("./file0"executing program [pid 6241] <... chdir resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 6239] <... chdir resumed>) = 0 [pid 6242] write(1, "executing program\n", 18 [pid 6241] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6238] <... chdir resumed>) = 0 [pid 6242] <... write resumed>) = 18 [pid 6240] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6239] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6242] memfd_create("syzkaller", 0 [pid 6241] <... openat resumed>) = 4 [pid 6240] <... openat resumed>) = 4 [pid 6239] <... openat resumed>) = 4 [pid 6238] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6242] <... memfd_create resumed>) = 3 [pid 6241] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6240] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6239] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6238] <... openat resumed>) = 4 [pid 6241] <... creat resumed>) = 5 [pid 6238] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6240] <... creat resumed>) = 5 [pid 6239] <... creat resumed>) = 5 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6241] sync( [pid 6240] sync( [pid 6238] <... creat resumed>) = 5 [pid 6239] sync( [pid 6238] sync( [pid 6242] <... write resumed>) = 524288 [pid 6242] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6242] close(3) = 0 [pid 6242] close(4) = 0 [pid 6242] mkdir("./file1", 0777 [pid 6241] <... sync resumed>) = 0 [pid 6240] <... sync resumed>) = 0 [pid 6239] <... sync resumed>) = 0 [pid 6238] <... sync resumed>) = 0 [pid 6242] <... mkdir resumed>) = 0 [pid 6241] exit_group(0 [pid 6240] exit_group(0 [pid 6241] <... exit_group resumed>) = ? [pid 6239] exit_group(0 [pid 6242] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6241] +++ exited with 0 +++ [pid 6238] exit_group(0 [pid 6242] <... mount resumed>) = 0 [pid 6239] <... exit_group resumed>) = ? [pid 6240] <... exit_group resumed>) = ? [pid 6238] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6242] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 88.153718][ T6242] loop2: detected capacity change from 0 to 1024 [pid 6242] chdir("./file1" [pid 6240] +++ exited with 0 +++ [pid 6239] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ [pid 5832] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6242] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6240, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5832] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6242] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5833] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6242] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 6242] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./81/binderfs" [pid 5830] getdents64(3, [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6242] <... creat resumed>) = 5 [pid 5833] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6242] sync( [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] unlink("./79/binderfs" [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5830] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./80/binderfs" [pid 5832] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] unlink("./79/binderfs" [pid 5829] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./81/file1", [pid 5830] <... unlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./79/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 4 [pid 6242] <... sync resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5829] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] exit_group(0 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] <... exit_group resumed>) = ? [pid 5832] getdents64(4, [pid 5829] newfstatat(AT_FDCWD, "./80/file1", [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 6242] +++ exited with 0 +++ [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5829] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./79/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] rmdir("./81/file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] umount2("./79/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./79/file1" [pid 5832] getdents64(3, [pid 5829] <... openat resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(3, [pid 5832] close(3 [pid 5829] newfstatat(4, "", [pid 5830] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5832] rmdir("./81" [pid 5830] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] close(3 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./79" [pid 5832] mkdir("./82", 0777 [pid 5829] close(4 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... close resumed>) = 0 [pid 5833] mkdir("./80", 0777 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] rmdir("./80/file1" [pid 5833] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(4 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(3, [pid 5833] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 5831] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... close resumed>) = 0 [pid 5833] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(3, "", [pid 5830] rmdir("./79/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] close(3 [pid 5830] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5831] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5830] close(3 [pid 5829] rmdir("./80" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... close resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5829] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6243 attached [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] rmdir("./79" [pid 5829] mkdir("./81", 0777 [pid 5831] unlink("./80/binderfs") = 0 [pid 5831] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6243] set_robust_list(0x555557df1660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6243 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] mkdir("./80", 0777 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5831] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6244 attached [pid 6243] <... set_robust_list resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6244] set_robust_list(0x555557df1660, 24 [pid 5831] newfstatat(AT_FDCWD, "./80/file1", [pid 6244] <... set_robust_list resumed>) = 0 [pid 6243] chdir("./82" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6244 [pid 6244] chdir("./80" [pid 6243] <... chdir resumed>) = 0 [pid 5831] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] close(3 [pid 6244] <... chdir resumed>) = 0 [pid 6243] <... prctl resumed>) = 0 [pid 6243] setpgid(0, 0 [pid 5831] getdents64(4, [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6243] <... setpgid resumed>) = 0 [pid 6244] <... prctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6244] setpgid(0, 0 [pid 5831] close(4 [pid 6244] <... setpgid resumed>) = 0 [pid 6243] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] rmdir("./80/file1") = 0 [pid 5831] getdents64(3, [pid 6244] <... openat resumed>) = 3 [pid 6243] write(3, "1000", 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6244] write(3, "1000", 4 [pid 6243] <... write resumed>) = 4 [pid 5831] close(3 [pid 5830] close(3 [pid 6243] close(3 [pid 5831] <... close resumed>) = 0 [pid 6244] <... write resumed>) = 4 [pid 6243] <... close resumed>) = 0 executing program executing program [pid 5831] rmdir("./80" [pid 6244] close(3 [pid 6243] symlink("/dev/binderfs", "./binderfs" [pid 6244] <... close resumed>) = 0 [pid 6243] <... symlink resumed>) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6243] write(1, "executing program\n", 18) = 18 [pid 6244] write(1, "executing program\n", 18 [pid 6243] memfd_create("syzkaller", 0 [pid 6244] <... write resumed>) = 18 [pid 6243] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 6244] memfd_create("syzkaller", 0 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] mkdir("./81", 0777 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6244] <... memfd_create resumed>) = 3 [pid 6243] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6245 attached [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6245] set_robust_list(0x555557df1660, 24 [pid 6244] <... mmap resumed>) = 0x7fd6d9800000 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6246 attached [pid 6245] <... set_robust_list resumed>) = 0 [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6245 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6246 [pid 6246] set_robust_list(0x555557df1660, 24 [pid 6245] chdir("./81" [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6246] <... set_robust_list resumed>) = 0 [pid 6245] <... chdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6246] chdir("./80" [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] close(3 [pid 6245] <... prctl resumed>) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6244] <... write resumed>) = 524288 [pid 6246] <... chdir resumed>) = 0 [pid 6245] <... openat resumed>) = 3 [pid 6243] <... write resumed>) = 524288 [pid 5831] <... close resumed>) = 0 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6245] write(3, "1000", 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6246] <... prctl resumed>) = 0 [pid 6245] <... write resumed>) = 4 [pid 6246] setpgid(0, 0 [pid 6245] close(3./strace-static-x86_64: Process 6247 attached [pid 6246] <... setpgid resumed>) = 0 [pid 6245] <... close resumed>) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs" [pid 6243] munmap(0x7fd6d9800000, 138412032 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6245] <... symlink resumed>) = 0 [pid 6243] <... munmap resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 6246] <... openat resumed>) = 3 [pid 6245] write(1, "executing program\n", 18 [pid 6247] set_robust_list(0x555557df1660, 24 [pid 6245] <... write resumed>) = 18 [pid 6243] <... openat resumed>) = 4 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6247 [pid 6247] <... set_robust_list resumed>) = 0 [pid 6243] ioctl(4, LOOP_SET_FD, 3 [pid 6245] memfd_create("syzkaller", 0 [pid 6247] chdir("./81" [pid 6245] <... memfd_create resumed>) = 3 [pid 6247] <... chdir resumed>) = 0 [pid 6246] write(3, "1000", 4 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6244] munmap(0x7fd6d9800000, 138412032 [pid 6247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6246] <... write resumed>) = 4 [pid 6245] <... mmap resumed>) = 0x7fd6d9800000 [pid 6247] <... prctl resumed>) = 0 [pid 6246] close(3 [pid 6244] <... munmap resumed>) = 0 [pid 6247] setpgid(0, 0 [pid 6246] <... close resumed>) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6244] ioctl(4, LOOP_SET_FD, 3executing program [pid 6247] <... setpgid resumed>) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6246] write(1, "executing program\n", 18 [pid 6247] <... openat resumed>) = 3 [pid 6246] <... write resumed>) = 18 [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6243] <... ioctl resumed>) = 0 [pid 6243] close(3) = 0 [pid 6243] close(4) = 0 [pid 6243] mkdir("./file1", 0777) = 0 [pid 6246] memfd_create("syzkaller", 0 [pid 6243] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6247] write(3, "1000", 4 [pid 6246] <... memfd_create resumed>) = 3 [pid 6247] <... write resumed>) = 4 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6247] close(3) = 0 [pid 6246] <... mmap resumed>) = 0x7fd6d9800000 [pid 6247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6244] <... ioctl resumed>) = 0 [pid 6244] close(3) = 0 [pid 6244] close(4) = 0 [pid 6244] mkdir("./file1", 0777) = 0 [pid 6244] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, ""executing program [pid 6247] write(1, "executing program\n", 18 [pid 6243] <... mount resumed>) = 0 [pid 6243] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6243] chdir("./file1") = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6243] chdir("./file0" [pid 6247] <... write resumed>) = 18 [pid 6244] <... mount resumed>) = 0 [pid 6243] <... chdir resumed>) = 0 [pid 6244] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6247] memfd_create("syzkaller", 0 [pid 6244] chdir("./file1" [pid 6247] <... memfd_create resumed>) = 3 [pid 6244] <... chdir resumed>) = 0 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 88.365522][ T6243] loop3: detected capacity change from 0 to 1024 [ 88.378365][ T6244] loop4: detected capacity change from 0 to 1024 [pid 6244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6243] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6247] <... mmap resumed>) = 0x7fd6d9800000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6243] <... openat resumed>) = 4 [pid 6244] chdir("./file0") = 0 [pid 6244] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6245] <... write resumed>) = 524288 [pid 6243] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6244] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [ 88.419964][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 88.419980][ T29] audit: type=1800 audit(1730647688.057:406): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 6245] munmap(0x7fd6d9800000, 138412032 [pid 6247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6246] <... write resumed>) = 524288 [pid 6245] <... munmap resumed>) = 0 [pid 6244] <... creat resumed>) = 5 [pid 6243] <... creat resumed>) = 5 [pid 6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6244] sync( [pid 6243] sync( [pid 6245] <... openat resumed>) = 4 [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6247] <... write resumed>) = 524288 [pid 6246] munmap(0x7fd6d9800000, 138412032 [pid 6247] munmap(0x7fd6d9800000, 138412032 [pid 6246] <... munmap resumed>) = 0 [pid 6247] <... munmap resumed>) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6247] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6246] <... openat resumed>) = 4 [pid 6247] <... openat resumed>) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6246] <... ioctl resumed>) = 0 [pid 6245] <... ioctl resumed>) = 0 [pid 6246] close(3 [pid 6247] <... ioctl resumed>) = 0 [pid 6246] <... close resumed>) = 0 [pid 6246] close(4) = 0 [pid 6246] mkdir("./file1", 0777) = 0 [pid 6243] <... sync resumed>) = 0 [pid 6243] exit_group(0) = ? [pid 6243] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6247] close(3 [pid 6246] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6245] close(3 [pid 6244] <... sync resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] close(4 [pid 6245] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6247] <... close resumed>) = 0 [pid 6245] close(4 [pid 5832] <... openat resumed>) = 3 [pid 6247] mkdir("./file1", 0777 [pid 5832] newfstatat(3, "", [pid 6247] <... mkdir resumed>) = 0 [pid 6245] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6245] mkdir("./file1", 0777 [pid 5832] getdents64(3, [pid 6245] <... mkdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6245] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6244] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6244] <... exit_group resumed>) = ? [pid 5832] unlink("./82/binderfs") = 0 [ 88.456563][ T29] audit: type=1800 audit(1730647688.067:407): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 88.459157][ T6245] loop0: detected capacity change from 0 to 1024 [ 88.489901][ T6246] loop1: detected capacity change from 0 to 1024 [ 88.498964][ T6247] loop2: detected capacity change from 0 to 1024 [pid 5832] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] +++ exited with 0 +++ [pid 6247] <... mount resumed>) = 0 [pid 6245] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6247] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6245] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6247] <... openat resumed>) = 3 [pid 6245] <... openat resumed>) = 3 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6245] chdir("./file1" [pid 5833] <... restart_syscall resumed>) = 0 [pid 6247] chdir("./file1" [pid 6245] <... chdir resumed>) = 0 [pid 5832] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] <... chdir resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6247] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./82/file1", [pid 6247] chdir("./file0" [pid 6246] <... mount resumed>) = 0 [pid 6245] chdir("./file0" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6247] <... chdir resumed>) = 0 [pid 6246] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6246] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] <... openat resumed>) = 4 [pid 6245] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5832] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6247] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6245] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 4 [pid 6245] <... openat resumed>) = 4 [pid 5833] getdents64(3, [pid 5832] newfstatat(4, "", [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6245] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5832] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] unlink("./80/binderfs" [pid 5832] close(4 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5833] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./82/file1") = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./82") = 0 [pid 5832] mkdir("./83", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6247] <... creat resumed>) = 5 [pid 6246] chdir("./file1" [pid 6245] <... creat resumed>) = 5 [pid 5833] <... umount2 resumed>) = 0 [pid 6246] <... chdir resumed>) = 0 [pid 5833] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] sync( [pid 6246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 6246] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6245] sync( [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6246] chdir("./file0" [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 6246] <... chdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./80/file1", [pid 5832] <... close resumed>) = 0 [ 88.575636][ T29] audit: type=1800 audit(1730647688.217:408): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [ 88.600335][ T29] audit: type=1800 audit(1730647688.217:409): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 6246] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557df1650) = 6248 ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x555557df1660, 24) = 0 [pid 6248] chdir("./83") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0 [pid 6246] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6248] <... setpgid resumed>) = 0 [pid 5833] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4 [pid 6246] <... creat resumed>) = 5 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] <... write resumed>) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6246] sync( [pid 5833] <... openat resumed>) = 4 [pid 6248] write(1, "executing program\n", 18 [pid 6247] <... sync resumed>) = 0 [pid 6246] <... sync resumed>) = 0 [pid 6245] <... sync resumed>) = 0 [pid 5833] newfstatat(4, "", executing program [pid 6248] <... write resumed>) = 18 [pid 6246] exit_group(0 [pid 6245] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6248] memfd_create("syzkaller", 0 [pid 6247] exit_group(0 [pid 6246] <... exit_group resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 5833] getdents64(4, [pid 6248] <... memfd_create resumed>) = 3 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6247] <... exit_group resumed>) = ? [pid 6246] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] close(4) = 0 [pid 5833] rmdir("./80/file1") = 0 [pid 6247] +++ exited with 0 +++ [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 88.640816][ T29] audit: type=1800 audit(1730647688.277:410): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5833] close(3 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./80" [pid 5831] <... restart_syscall resumed>) = 0 [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./81", 0777) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... openat resumed>) = 3 [pid 5830] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] <... write resumed>) = 524288 [pid 5833] <... ioctl resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] munmap(0x7fd6d9800000, 138412032 [pid 5833] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 3 [pid 6248] <... munmap resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5831] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] getdents64(3, [pid 5831] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./81/binderfs" [pid 5833] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] unlink("./81/binderfs" [pid 5831] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(3, "", [pid 5829] <... unlink resumed>) = 0 [pid 6248] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 5830] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6249 ./strace-static-x86_64: Process 6249 attached [pid 6248] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = 0 [pid 6249] set_robust_list(0x555557df1660, 24 [pid 5831] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6249] <... set_robust_list resumed>) = 0 [pid 6248] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6249] chdir("./81" [pid 6248] <... close resumed>) = 0 [pid 6249] <... chdir resumed>) = 0 [pid 6248] close(4 [pid 5831] newfstatat(AT_FDCWD, "./81/file1", [pid 5830] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6248] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./81/file1", [pid 6249] <... prctl resumed>) = 0 [pid 6248] mkdir("./file1", 0777 [pid 5831] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./80/binderfs" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6249] setpgid(0, 0 [pid 6248] <... mkdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6249] <... setpgid resumed>) = 0 [pid 6248] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... openat resumed>) = 4 [pid 5829] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6249] <... openat resumed>) = 3 [pid 5831] newfstatat(4, "", [pid 5829] <... openat resumed>) = 4 [pid 6249] write(3, "1000", 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(4, "", [pid 6249] <... write resumed>) = 4 [pid 5831] getdents64(4, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6249] close(3 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, [pid 6249] <... close resumed>) = 0 [pid 5831] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6249] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] getdents64(4, [pid 6249] <... symlink resumed>) = 0 [pid 6248] <... mount resumed>) = 0 [pid 5831] close(4 [pid 5830] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6249] write(1, "executing program\n", 18 [pid 6248] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5831] <... close resumed>) = 0 executing program [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(4 [pid 6249] <... write resumed>) = 18 [pid 6248] <... openat resumed>) = 3 [pid 5831] rmdir("./81/file1" [pid 5830] newfstatat(AT_FDCWD, "./80/file1", [pid 5829] <... close resumed>) = 0 [pid 6249] memfd_create("syzkaller", 0 [pid 6248] chdir("./file1" [pid 5831] <... rmdir resumed>) = 0 [pid 5829] rmdir("./81/file1" [pid 6249] <... memfd_create resumed>) = 3 [pid 6248] <... chdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6248] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(3, [pid 6249] <... mmap resumed>) = 0x7fd6d9800000 [pid 6248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./81" [pid 5829] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./81") = 0 [pid 5831] mkdir("./82", 0777) = 0 [pid 5829] mkdir("./82", 0777 [pid 6248] chdir("./file0" [pid 5829] <... mkdir resumed>) = 0 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6248] <... chdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./80/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6248] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 4 [ 88.731945][ T6248] loop3: detected capacity change from 0 to 1024 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5829] close(3 [pid 5831] <... close resumed>) = 0 [pid 6249] <... write resumed>) = 524288 [pid 6248] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] newfstatat(4, "", [pid 5829] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6251 attached ./strace-static-x86_64: Process 6250 attached [pid 6249] munmap(0x7fd6d9800000, 138412032 [pid 6248] <... creat resumed>) = 5 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6251] set_robust_list(0x555557df1660, 24 [pid 6248] sync( [pid 5830] getdents64(4, [pid 6251] <... set_robust_list resumed>) = 0 [pid 6250] set_robust_list(0x555557df1660, 24 [pid 6249] <... munmap resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6250] <... set_robust_list resumed>) = 0 [pid 6251] chdir("./82" [pid 6250] chdir("./82" [pid 6249] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] getdents64(4, [pid 6251] <... chdir resumed>) = 0 [pid 6250] <... chdir resumed>) = 0 [pid 6249] <... openat resumed>) = 4 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6248] <... sync resumed>) = 0 [ 88.788715][ T29] audit: type=1800 audit(1730647688.427:411): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop3" ino=0 res=0 errno=0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6251 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6250 [pid 6251] <... prctl resumed>) = 0 [pid 6250] <... prctl resumed>) = 0 [pid 6248] exit_group(0 [pid 5830] close(4 [pid 6248] <... exit_group resumed>) = ? [pid 5830] <... close resumed>) = 0 [pid 6248] +++ exited with 0 +++ [pid 5830] rmdir("./80/file1") = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] getdents64(3, [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 6251] setpgid(0, 0 [pid 6250] setpgid(0, 0 [pid 5830] rmdir("./80" [pid 6251] <... setpgid resumed>) = 0 [pid 6250] <... setpgid resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./81", 0777 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6249] <... ioctl resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6249] close(3 [pid 6250] <... openat resumed>) = 3 [pid 6249] <... close resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6251] <... openat resumed>) = 3 [pid 6250] write(3, "1000", 4 [pid 6249] close(4 [pid 6251] write(3, "1000", 4 [pid 6250] <... write resumed>) = 4 [pid 6249] <... close resumed>) = 0 [pid 5832] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6250] close(3 [pid 6249] mkdir("./file1", 0777 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6249] <... mkdir resumed>) = 0 [pid 5832] newfstatat(3, "", executing program [pid 6250] <... symlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6251] <... write resumed>) = 4 [pid 6250] write(1, "executing program\n", 18 [pid 6249] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5832] getdents64(3, [pid 6251] close(3 [pid 6250] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6251] <... close resumed>) = 0 [pid 6250] memfd_create("syzkaller", 0 [pid 5832] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... ioctl resumed>) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs" [pid 6250] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6251] <... symlink resumed>) = 0 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5830] close(3 [pid 6251] write(1, "executing program\n", 18 [pid 6250] <... mmap resumed>) = 0x7fd6d9800000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... close resumed>) = 0 [pid 5832] unlink("./83/binderfs") = 0 [pid 5832] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6251] <... write resumed>) = 18 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6251] memfd_create("syzkaller", 0 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6249] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 6251] <... memfd_create resumed>) = 3 [pid 5832] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 88.835410][ T6249] loop4: detected capacity change from 0 to 1024 [pid 5832] newfstatat(AT_FDCWD, "./83/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6252 ./strace-static-x86_64: Process 6252 attached [pid 6249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] set_robust_list(0x555557df1660, 24 [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] chdir("./file1" [pid 5832] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", [pid 6250] <... write resumed>) = 524288 [pid 6249] <... chdir resumed>) = 0 [pid 6252] <... set_robust_list resumed>) = 0 [pid 6251] <... mmap resumed>) = 0x7fd6d9800000 [pid 6249] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6252] chdir("./81" [pid 6249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 6252] <... chdir resumed>) = 0 [pid 6251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6249] chdir("./file0" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] close(4) = 0 [pid 6252] <... prctl resumed>) = 0 [pid 5832] rmdir("./83/file1" [pid 6252] setpgid(0, 0 [pid 6251] <... write resumed>) = 524288 [pid 6250] munmap(0x7fd6d9800000, 138412032 [pid 6249] <... chdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6252] <... setpgid resumed>) = 0 [pid 5832] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6250] <... munmap resumed>) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./83" [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6251] munmap(0x7fd6d9800000, 138412032 [pid 6250] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6249] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... rmdir resumed>) = 0 [pid 6252] <... openat resumed>) = 3 [pid 5832] mkdir("./84", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6252] write(3, "1000", 4 [pid 6250] <... openat resumed>) = 4 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6253 attached [pid 6252] <... write resumed>) = 4 [pid 6251] <... munmap resumed>) = 0 [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 6249] <... openat resumed>) = 4 [pid 6253] set_robust_list(0x555557df1660, 24 [pid 6251] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6249] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6253 [pid 6253] <... set_robust_list resumed>) = 0 [pid 6253] chdir("./84") = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6252] close(3 [pid 6251] <... openat resumed>) = 4 [pid 6249] <... creat resumed>) = 5 [pid 6249] sync( [pid 6251] ioctl(4, LOOP_SET_FD, 3 [pid 6253] <... prctl resumed>) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6253] close(3) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6252] <... close resumed>) = 0 [pid 6251] <... ioctl resumed>) = 0 executing program [pid 6253] write(1, "executing program\n", 18 [pid 6252] symlink("/dev/binderfs", "./binderfs" [pid 6251] close(3 [pid 6253] <... write resumed>) = 18 [pid 6251] <... close resumed>) = 0 [pid 6253] memfd_create("syzkaller", 0 [pid 6252] <... symlink resumed>) = 0 [pid 6251] close(4executing program [pid 6253] <... memfd_create resumed>) = 3 [pid 6252] write(1, "executing program\n", 18 [pid 6251] <... close resumed>) = 0 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6252] <... write resumed>) = 18 [pid 6251] mkdir("./file1", 0777 [pid 6253] <... mmap resumed>) = 0x7fd6d9800000 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6251] <... mkdir resumed>) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6252] <... mmap resumed>) = 0x7fd6d9800000 [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6251] <... mount resumed>) = 0 [pid 6250] close(3 [pid 6249] <... sync resumed>) = 0 [pid 6251] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6250] <... close resumed>) = 0 [pid 6249] exit_group(0 [pid 6252] <... write resumed>) = 524288 [pid 6251] <... openat resumed>) = 3 [pid 6250] close(4 [pid 6249] <... exit_group resumed>) = ? [pid 6249] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6250] <... close resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6250] mkdir("./file1", 0777 [pid 6253] <... write resumed>) = 524288 [pid 6250] <... mkdir resumed>) = 0 [pid 6253] munmap(0x7fd6d9800000, 138412032 [ 88.917594][ T29] audit: type=1800 audit(1730647688.557:412): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop4" ino=0 res=0 errno=0 [ 88.946100][ T6250] loop0: detected capacity change from 0 to 1024 [ 88.957967][ T6251] loop2: detected capacity change from 0 to 1024 [pid 6251] chdir("./file1" [pid 6253] <... munmap resumed>) = 0 [pid 6251] <... chdir resumed>) = 0 [pid 6251] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6252] munmap(0x7fd6d9800000, 138412032 [pid 6251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6252] <... munmap resumed>) = 0 [pid 6251] chdir("./file0" [pid 6250] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... restart_syscall resumed>) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6253] <... openat resumed>) = 4 [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 5833] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6252] <... openat resumed>) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./81/binderfs") = 0 [pid 5833] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] <... ioctl resumed>) = 0 [pid 6252] <... ioctl resumed>) = 0 [pid 6251] <... chdir resumed>) = 0 [pid 6250] <... mount resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 6253] close(3 [pid 6252] close(3 [pid 6251] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] <... close resumed>) = 0 [pid 6252] <... close resumed>) = 0 [pid 6251] <... openat resumed>) = 4 [pid 6250] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] close(4 [pid 5833] newfstatat(AT_FDCWD, "./81/file1", [pid 6252] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", [pid 6252] mkdir("./file1", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6252] <... mkdir resumed>) = 0 [pid 5833] getdents64(4, [pid 6252] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6253] close(4 [pid 6251] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6250] chdir("./file1" [pid 5833] getdents64(4, [pid 6253] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 6253] mkdir("./file1", 0777 [pid 6250] <... chdir resumed>) = 0 [pid 5833] rmdir("./81/file1" [pid 6253] <... mkdir resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... rmdir resumed>) = 0 [pid 6251] <... creat resumed>) = 5 [pid 6250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] getdents64(3, [pid 6251] sync( [pid 6250] chdir("./file0" [pid 6253] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6252] <... mount resumed>) = 0 [pid 6250] <... chdir resumed>) = 0 [pid 5833] close(3 [ 89.019253][ T6253] loop3: detected capacity change from 0 to 1024 [ 89.026805][ T6252] loop1: detected capacity change from 0 to 1024 [ 89.046056][ T29] audit: type=1800 audit(1730647688.687:413): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop2" ino=0 res=0 errno=0 [pid 6250] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6252] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... close resumed>) = 0 [pid 6252] <... openat resumed>) = 3 [pid 5833] rmdir("./81" [pid 6252] chdir("./file1" [pid 6250] <... openat resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 6252] <... chdir resumed>) = 0 [pid 5833] mkdir("./82", 0777 [pid 6252] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... mkdir resumed>) = 0 [pid 6252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6252] chdir("./file0" [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x555557df1660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6254 [pid 6254] <... set_robust_list resumed>) = 0 [pid 6254] chdir("./82") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6252] <... chdir resumed>) = 0 [pid 6250] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6254] write(3, "1000", 4) = 4 [pid 6252] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6254] close(3) = 0 [pid 6252] <... openat resumed>) = 4 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6253] <... mount resumed>) = 0 [pid 6250] <... creat resumed>) = 5 [pid 6253] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6252] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6250] sync( [pid 6253] <... openat resumed>) = 3 executing program [pid 6254] write(1, "executing program\n", 18 [pid 6253] chdir("./file1" [pid 6254] <... write resumed>) = 18 [pid 6253] <... chdir resumed>) = 0 [pid 6254] memfd_create("syzkaller", 0 [ 89.079865][ T29] audit: type=1800 audit(1730647688.717:414): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop0" ino=0 res=0 errno=0 [pid 6253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6254] <... memfd_create resumed>) = 3 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6252] <... creat resumed>) = 5 [pid 6254] <... mmap resumed>) = 0x7fd6d9800000 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6252] sync( [pid 6253] chdir("./file0") = 0 [pid 6253] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6253] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6253] sync( [pid 6254] <... write resumed>) = 524288 [pid 6253] <... sync resumed>) = 0 [pid 6251] <... sync resumed>) = 0 [pid 6250] <... sync resumed>) = 0 [pid 6254] munmap(0x7fd6d9800000, 138412032 [pid 6253] exit_group(0 [pid 6251] exit_group(0 [pid 6254] <... munmap resumed>) = 0 [pid 6253] <... exit_group resumed>) = ? [pid 6252] <... sync resumed>) = 0 [pid 6251] <... exit_group resumed>) = ? [pid 6250] exit_group(0 [pid 6254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6253] +++ exited with 0 +++ [pid 6252] exit_group(0 [pid 6250] <... exit_group resumed>) = ? [pid 6252] <... exit_group resumed>) = ? [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6254] <... openat resumed>) = 4 [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6254] ioctl(4, LOOP_SET_FD, 3 [pid 6250] +++ exited with 0 +++ [ 89.121333][ T29] audit: type=1800 audit(1730647688.747:415): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor385" name="file2" dev="loop1" ino=0 res=0 errno=0 [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5831] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5832] getdents64(3, [pid 5831] newfstatat(3, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6254] <... ioctl resumed>) = 0 [pid 5832] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6254] close(3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6254] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5831] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 6254] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] <... close resumed>) = 0 [pid 5832] unlink("./84/binderfs" [pid 5831] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5829] <... restart_syscall resumed>) = 0 [pid 6254] mkdir("./file1", 0777 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6254] <... mkdir resumed>) = 0 [pid 5832] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./82/binderfs" [pid 5830] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] newfstatat(3, "", [pid 5829] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5832] <... umount2 resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] unlink("./82/binderfs" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... unlink resumed>) = 0 [pid 6254] <... mount resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./84/file1", [pid 5831] newfstatat(AT_FDCWD, "./82/file1", [pid 5830] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] <... openat resumed>) = 3 [pid 5832] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./81/binderfs", [pid 6254] chdir("./file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6254] <... chdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] unlink("./81/binderfs" [pid 6254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5831] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] chdir("./file0" [pid 5832] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(AT_FDCWD, "./82/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5830] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5829] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] <... openat resumed>) = 4 [pid 5832] close(4 [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./81/file1", [pid 5832] <... close resumed>) = 0 [pid 5831] rmdir("./82/file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5832] rmdir("./84/file1" [pid 5830] umount2("./81/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5830] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] newfstatat(4, "", [pid 5832] getdents64(3, [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 5830] newfstatat(4, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] close(3 [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] rmdir("./82" [pid 5830] getdents64(4, [pid 5829] getdents64(4, [pid 5832] rmdir("./84" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./81/file1" [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [ 89.175794][ T6254] loop4: detected capacity change from 0 to 1024 [pid 5830] getdents64(3, [pid 6254] <... creat resumed>) = 5 [pid 5832] mkdir("./85", 0777 [pid 5831] mkdir("./83", 0777 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6254] sync( [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5829] getdents64(4, [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] close(4 [pid 5832] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] rmdir("./81" [pid 5829] <... close resumed>) = 0 [pid 5829] rmdir("./82/file1" [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5832] close(3 [pid 5830] mkdir("./82", 0777 [pid 5829] getdents64(3, [pid 5832] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6254] <... sync resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] rmdir("./82" [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6254] exit_group(0 [pid 5830] <... ioctl resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] close(3 [pid 5829] mkdir("./83", 0777 [pid 6254] <... exit_group resumed>) = ? [pid 5830] <... close resumed>) = 0 [pid 6254] +++ exited with 0 +++ [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5831] <... close resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6255 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6255 attached [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6256 attached [pid 6255] set_robust_list(0x555557df1660, 24 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] close(3 [pid 6256] set_robust_list(0x555557df1660, 24 [pid 5833] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6256 [pid 5829] <... close resumed>) = 0 ./strace-static-x86_64: Process 6257 attached [pid 6256] <... set_robust_list resumed>) = 0 [pid 6255] <... set_robust_list resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] newfstatat(3, "", [pid 6256] chdir("./82" [pid 6255] chdir("./85" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6257 [pid 6256] <... chdir resumed>) = 0 [pid 5833] getdents64(3, ./strace-static-x86_64: Process 6258 attached [pid 6257] set_robust_list(0x555557df1660, 24 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6255] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6258 [pid 6257] <... set_robust_list resumed>) = 0 [pid 6256] <... prctl resumed>) = 0 [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] set_robust_list(0x555557df1660, 24 [pid 6257] chdir("./83" [pid 6255] <... prctl resumed>) = 0 [pid 5833] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6256] setpgid(0, 0 [pid 6255] setpgid(0, 0) = 0 [pid 6256] <... setpgid resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] chdir("./83" [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... prctl resumed>) = 0 [pid 6256] <... openat resumed>) = 3 [pid 6255] write(3, "1000", 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6257] setpgid(0, 0 [pid 6256] write(3, "1000", 4 [pid 6255] <... write resumed>) = 4 [pid 5833] unlink("./82/binderfs" [pid 6258] <... prctl resumed>) = 0 [pid 6257] <... setpgid resumed>) = 0 [pid 6256] <... write resumed>) = 4 [pid 6255] close(3 [pid 5833] <... unlink resumed>) = 0 [pid 6258] setpgid(0, 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6256] close(3 [pid 6255] <... close resumed>) = 0 [pid 6258] <... setpgid resumed>) = 0 [pid 6257] <... openat resumed>) = 3 [pid 6256] <... close resumed>) = 0 [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6257] write(3, "1000", 4 [pid 6256] symlink("/dev/binderfs", "./binderfs" [pid 6258] <... openat resumed>) = 3 [pid 6257] <... write resumed>) = 4 [pid 6256] <... symlink resumed>) = 0 [pid 6255] <... symlink resumed>) = 0 [pid 6257] close(3executing program ) = 0 [pid 6256] write(1, "executing program\n", 18 [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 6258] write(3, "1000", 4 [pid 6256] <... write resumed>) = 18 [pid 6255] write(1, "executing program\n", 18 [pid 5833] <... umount2 resumed>) = 0 executing program executing program [pid 6257] <... symlink resumed>) = 0 [pid 6258] <... write resumed>) = 4 [pid 6256] memfd_create("syzkaller", 0 [pid 6258] close(3 [pid 6257] write(1, "executing program\n", 18 [pid 6256] <... memfd_create resumed>) = 3 [pid 6255] <... write resumed>) = 18 [pid 6258] <... close resumed>) = 0 [pid 6257] <... write resumed>) = 18 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6255] memfd_create("syzkaller", 0 [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 6257] memfd_create("syzkaller", 0 [pid 6256] <... mmap resumed>) = 0x7fd6d9800000 [pid 6255] <... memfd_create resumed>) = 3 [pid 5833] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6258] <... symlink resumed>) = 0 [pid 6257] <... memfd_create resumed>) = 3 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] write(1, "executing program\n", 18 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 6258] <... write resumed>) = 18 [pid 6257] <... mmap resumed>) = 0x7fd6d9800000 [pid 6255] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] newfstatat(AT_FDCWD, "./82/file1", [pid 6258] memfd_create("syzkaller", 0 [pid 6257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6258] <... memfd_create resumed>) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6258] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6256] <... write resumed>) = 524288 [pid 5833] close(4) = 0 [pid 5833] rmdir("./82/file1") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./82" [pid 6255] <... write resumed>) = 524288 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./83", 0777 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] <... mkdir resumed>) = 0 [pid 6256] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6256] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6256] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = 0 [pid 5833] close(3 [pid 6255] munmap(0x7fd6d9800000, 138412032 [pid 6258] <... write resumed>) = 524288 [pid 6257] <... write resumed>) = 524288 [pid 5833] <... close resumed>) = 0 [pid 6258] munmap(0x7fd6d9800000, 138412032 [pid 6255] <... munmap resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6258] <... munmap resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6255] <... openat resumed>) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6259 attached [pid 6257] munmap(0x7fd6d9800000, 138412032 [pid 6256] <... ioctl resumed>) = 0 [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6259 [pid 6259] set_robust_list(0x555557df1660, 24 [pid 6257] <... munmap resumed>) = 0 [pid 6256] close(3 [pid 6259] <... set_robust_list resumed>) = 0 [pid 6257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6256] <... close resumed>) = 0 [pid 6257] <... openat resumed>) = 4 [pid 6256] close(4) = 0 [pid 6259] chdir("./83" [pid 6256] mkdir("./file1", 0777) = 0 [pid 6258] <... ioctl resumed>) = 0 [pid 6259] <... chdir resumed>) = 0 [pid 6257] ioctl(4, LOOP_SET_FD, 3 [pid 6256] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] close(3 [pid 6255] <... ioctl resumed>) = 0 [pid 6259] <... prctl resumed>) = 0 [pid 6258] <... close resumed>) = 0 [pid 6257] <... ioctl resumed>) = 0 [pid 6255] close(3 [pid 6259] setpgid(0, 0 [pid 6256] <... mount resumed>) = 0 [pid 6255] <... close resumed>) = 0 [pid 6258] close(4 [pid 6257] close(3 [pid 6256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6255] close(4 [pid 6259] <... setpgid resumed>) = 0 [pid 6258] <... close resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 6256] <... openat resumed>) = 3 [pid 6255] <... close resumed>) = 0 [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6258] mkdir("./file1", 0777 [pid 6257] close(4 [pid 6256] chdir("./file1" [pid 6255] mkdir("./file1", 0777 [pid 6259] <... openat resumed>) = 3 [pid 6258] <... mkdir resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 6256] <... chdir resumed>) = 0 [pid 6255] <... mkdir resumed>) = 0 [pid 6259] write(3, "1000", 4 [pid 6258] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6257] mkdir("./file1", 0777 [pid 6256] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6255] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6259] <... write resumed>) = 4 [pid 6257] <... mkdir resumed>) = 0 [pid 6256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6259] close(3 [pid 6257] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [ 89.373570][ T6256] loop1: detected capacity change from 0 to 1024 [ 89.385584][ T6258] loop0: detected capacity change from 0 to 1024 [ 89.397207][ T6255] loop3: detected capacity change from 0 to 1024 [ 89.414298][ T6257] loop2: detected capacity change from 0 to 1024 [pid 6256] chdir("./file0"executing program [pid 6259] <... close resumed>) = 0 [pid 6259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6259] write(1, "executing program\n", 18) = 18 [pid 6256] <... chdir resumed>) = 0 [pid 6259] memfd_create("syzkaller", 0 [pid 6256] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6259] <... memfd_create resumed>) = 3 [pid 6258] <... mount resumed>) = 0 [pid 6257] <... mount resumed>) = 0 [pid 6256] <... openat resumed>) = 4 [pid 6255] <... mount resumed>) = 0 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6258] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6255] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6259] <... mmap resumed>) = 0x7fd6d9800000 [pid 6258] <... openat resumed>) = 3 [pid 6257] <... openat resumed>) = 3 [pid 6256] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6255] <... openat resumed>) = 3 [pid 6258] chdir("./file1" [pid 6257] chdir("./file1" [pid 6255] chdir("./file1" [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6255] <... chdir resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6256] <... creat resumed>) = 5 [pid 6255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6258] chdir("./file0" [pid 6257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6256] sync( [pid 6255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6257] chdir("./file0" [pid 6255] chdir("./file0" [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6255] <... chdir resumed>) = 0 [pid 6258] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6255] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6257] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6258] <... openat resumed>) = 4 [pid 6257] <... openat resumed>) = 4 [pid 6257] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6255] <... openat resumed>) = 4 [pid 6259] <... write resumed>) = 524288 [pid 6258] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6259] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6258] <... creat resumed>) = 5 [pid 6257] <... creat resumed>) = 5 [pid 6255] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6258] sync( [pid 6259] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6259] ioctl(4, LOOP_SET_FD, 3 [pid 6257] sync( [pid 6255] <... creat resumed>) = 5 [pid 6259] <... ioctl resumed>) = 0 [pid 6259] close(3) = 0 [pid 6259] close(4 [pid 6255] sync( [pid 6259] <... close resumed>) = 0 [pid 6259] mkdir("./file1", 0777 [pid 6258] <... sync resumed>) = 0 [pid 6257] <... sync resumed>) = 0 [pid 6256] <... sync resumed>) = 0 [pid 6255] <... sync resumed>) = 0 [pid 6259] <... mkdir resumed>) = 0 [pid 6258] exit_group(0 [pid 6257] exit_group(0 [pid 6256] exit_group(0 [pid 6255] exit_group(0 [pid 6259] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6258] <... exit_group resumed>) = ? [pid 6257] <... exit_group resumed>) = ? [pid 6256] <... exit_group resumed>) = ? [pid 6255] <... exit_group resumed>) = ? [pid 6256] +++ exited with 0 +++ [pid 6255] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6258] +++ exited with 0 +++ [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6257] +++ exited with 0 +++ [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6259] <... mount resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 6259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5832] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] chdir("./file1" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... chdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 6259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6259] chdir("./file0" [pid 5832] getdents64(3, [pid 5831] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(3, "", [pid 5829] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] <... openat resumed>) = 3 [pid 6259] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(3, "", [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5830] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./85/binderfs" [pid 5830] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 89.511590][ T6259] loop4: detected capacity change from 0 to 1024 [pid 5832] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./82/binderfs" [pid 6259] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5830] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6259] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] getdents64(3, [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 5831] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... creat resumed>) = 5 [pid 5832] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6259] sync( [pid 5829] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5830] newfstatat(AT_FDCWD, "./82/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5829] unlink("./83/binderfs" [pid 5832] newfstatat(AT_FDCWD, "./85/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./82/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./83/binderfs" [pid 5830] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... unlink resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5830] newfstatat(4, "", [pid 5832] newfstatat(4, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5832] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... umount2 resumed>) = 0 [pid 5829] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] getdents64(4, [pid 6259] exit_group(0 [pid 5831] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6259] <... exit_group resumed>) = ? [pid 5832] getdents64(4, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] newfstatat(AT_FDCWD, "./83/file1", [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(4 [pid 5831] newfstatat(AT_FDCWD, "./83/file1", [pid 5830] <... close resumed>) = 0 [pid 5829] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5830] rmdir("./82/file1" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6259] +++ exited with 0 +++ [pid 5832] rmdir("./85/file1" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] <... rmdir resumed>) = 0 [pid 5831] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5829] <... openat resumed>) = 4 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] close(3 [pid 5831] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5830] rmdir("./82" [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] getdents64(4, [pid 5833] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... openat resumed>) = 3 [pid 5832] rmdir("./85" [pid 5831] getdents64(4, [pid 5830] mkdir("./83", 0777 [pid 5829] getdents64(4, [pid 5833] newfstatat(3, "", [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5829] close(4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] mkdir("./86", 0777 [pid 5833] getdents64(3, [pid 5829] <... close resumed>) = 0 [pid 5831] rmdir("./83/file1" [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5829] rmdir("./83/file1" [pid 5833] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5831] close(3 [pid 5830] <... ioctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(3, [pid 5833] unlink("./83/binderfs" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... close resumed>) = 0 [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] rmdir("./83" [pid 5833] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(3) = 0 [pid 5832] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] rmdir("./83") = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5829] mkdir("./84", 0777 [pid 5832] <... close resumed>) = 0 [pid 5831] mkdir("./84", 0777 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./83/file1", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... openat resumed>) = 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 3 [pid 5833] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... ioctl resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5829] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6260 attached ./strace-static-x86_64: Process 6261 attached [pid 5833] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] close(3 [pid 6260] set_robust_list(0x555557df1660, 24 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6261 [pid 5831] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6260 [pid 5829] <... close resumed>) = 0 [pid 6260] <... set_robust_list resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 6261] set_robust_list(0x555557df1660, 24 [pid 6260] chdir("./83" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6261] <... set_robust_list resumed>) = 0 [pid 5833] getdents64(4, [pid 6261] chdir("./86" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6261] <... chdir resumed>) = 0 [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6261] setpgid(0, 0) = 0 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6261] write(3, "1000", 4 [pid 6260] <... chdir resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6261] <... write resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4./strace-static-x86_64: Process 6262 attached [pid 6261] close(3 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... close resumed>) = 0 [pid 6261] <... close resumed>) = 0 [pid 6260] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6263 attached [pid 5833] rmdir("./83/file1" [pid 6262] set_robust_list(0x555557df1660, 24 [pid 6263] set_robust_list(0x555557df1660, 24 [pid 6261] symlink("/dev/binderfs", "./binderfs" [pid 6260] setpgid(0, 0 [pid 6262] <... set_robust_list resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6263] <... set_robust_list resumed>) = 0 [pid 6261] <... symlink resumed>) = 0 [pid 6260] <... setpgid resumed>) = 0 [pid 6263] chdir("./84"executing program [pid 6262] chdir("./84" [pid 6261] write(1, "executing program\n", 18 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] getdents64(3, [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6263 [pid 6263] <... chdir resumed>) = 0 [pid 6262] <... chdir resumed>) = 0 [pid 6261] <... write resumed>) = 18 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6262 [pid 6261] memfd_create("syzkaller", 0 [pid 6260] <... openat resumed>) = 3 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6263] <... prctl resumed>) = 0 [pid 6262] <... prctl resumed>) = 0 [pid 5833] close(3 [pid 6263] setpgid(0, 0) = 0 [pid 6262] setpgid(0, 0 [pid 6261] <... memfd_create resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] rmdir("./83" [pid 6262] <... setpgid resumed>) = 0 [pid 6261] <... mmap resumed>) = 0x7fd6d9800000 [pid 6260] write(3, "1000", 4 [pid 5833] <... rmdir resumed>) = 0 [pid 6263] <... openat resumed>) = 3 [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] mkdir("./84", 0777 [pid 6263] write(3, "1000", 4executing program ) = 4 [pid 6262] <... openat resumed>) = 3 [pid 6260] <... write resumed>) = 4 [pid 5833] <... mkdir resumed>) = 0 [pid 6263] close(3 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6263] <... close resumed>) = 0 [pid 6262] write(3, "1000", 4 [pid 6263] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... openat resumed>) = 3 [pid 6262] <... write resumed>) = 4 [pid 6263] <... symlink resumed>) = 0 [pid 6263] write(1, "executing program\n", 18 [pid 6262] close(3) = 0 [pid 6263] <... write resumed>) = 18 [pid 6262] symlink("/dev/binderfs", "./binderfs" [pid 6263] memfd_create("syzkaller", 0 [pid 6260] close(3 [pid 6262] <... symlink resumed>) = 0 [pid 6260] <... close resumed>) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] <... memfd_create resumed>) = 3 [pid 6262] write(1, "executing program\n", 18executing program executing program [pid 6260] write(1, "executing program\n", 18 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6262] <... write resumed>) = 18 [pid 6260] <... write resumed>) = 18 [pid 6263] <... mmap resumed>) = 0x7fd6d9800000 [pid 6262] memfd_create("syzkaller", 0 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6260] memfd_create("syzkaller", 0 [pid 5833] <... ioctl resumed>) = 0 [pid 6262] <... memfd_create resumed>) = 3 [pid 6260] <... memfd_create resumed>) = 3 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] close(3 [pid 6262] <... mmap resumed>) = 0x7fd6d9800000 [pid 5833] <... close resumed>) = 0 [pid 6261] <... write resumed>) = 524288 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6261] munmap(0x7fd6d9800000, 138412032) = 0 ./strace-static-x86_64: Process 6264 attached [pid 6264] set_robust_list(0x555557df1660, 24 [pid 6262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6264] <... set_robust_list resumed>) = 0 [pid 6261] <... openat resumed>) = 4 [pid 6264] chdir("./84" [pid 6263] <... write resumed>) = 524288 [pid 6264] <... chdir resumed>) = 0 [pid 6263] munmap(0x7fd6d9800000, 138412032 [pid 6261] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6264 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] <... munmap resumed>) = 0 [pid 6262] <... write resumed>) = 524288 [pid 6260] <... write resumed>) = 524288 [pid 6264] setpgid(0, 0 [pid 6263] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6262] munmap(0x7fd6d9800000, 138412032 [pid 6260] munmap(0x7fd6d9800000, 138412032 [pid 6263] <... openat resumed>) = 4 [pid 6264] <... setpgid resumed>) = 0 [pid 6260] <... munmap resumed>) = 0 [pid 6262] <... munmap resumed>) = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6263] ioctl(4, LOOP_SET_FD, 3 [pid 6264] <... openat resumed>) = 3 [pid 6261] <... ioctl resumed>) = 0 [pid 6264] write(3, "1000", 4 [pid 6263] <... ioctl resumed>) = 0 [pid 6262] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6260] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6264] <... write resumed>) = 4 [pid 6263] close(3 [pid 6261] close(3 [pid 6264] close(3 [pid 6262] <... openat resumed>) = 4 [pid 6261] <... close resumed>) = 0 [pid 6260] <... openat resumed>) = 4 [pid 6263] <... close resumed>) = 0 [pid 6264] <... close resumed>) = 0 [pid 6263] close(4 [pid 6262] ioctl(4, LOOP_SET_FD, 3 [pid 6261] close(4 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 6263] <... close resumed>) = 0 [pid 6263] mkdir("./file1", 0777 [pid 6264] <... symlink resumed>) = 0 [pid 6263] <... mkdir resumed>) = 0 executing program [pid 6264] write(1, "executing program\n", 18 [pid 6263] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6264] <... write resumed>) = 18 [pid 6261] <... close resumed>) = 0 [pid 6261] mkdir("./file1", 0777 [pid 6264] memfd_create("syzkaller", 0 [pid 6261] <... mkdir resumed>) = 0 [pid 6261] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6262] <... ioctl resumed>) = 0 [pid 6264] <... memfd_create resumed>) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6262] close(3) = 0 [pid 6262] close(4) = 0 [pid 6262] mkdir("./file1", 0777 [pid 6260] <... ioctl resumed>) = 0 [pid 6264] <... write resumed>) = 524288 [pid 6263] <... mount resumed>) = 0 [pid 6262] <... mkdir resumed>) = 0 [pid 6261] <... mount resumed>) = 0 [pid 6263] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6261] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6260] close(3 [pid 6264] munmap(0x7fd6d9800000, 138412032 [pid 6263] <... openat resumed>) = 3 [pid 6262] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6261] <... openat resumed>) = 3 [pid 6260] <... close resumed>) = 0 [pid 6264] <... munmap resumed>) = 0 [pid 6263] chdir("./file1" [pid 6261] chdir("./file1" [pid 6260] close(4 [pid 6263] <... chdir resumed>) = 0 [pid 6261] <... chdir resumed>) = 0 [pid 6263] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6260] <... close resumed>) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6261] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 89.774238][ T6261] loop3: detected capacity change from 0 to 1024 [ 89.784093][ T6263] loop2: detected capacity change from 0 to 1024 [ 89.801322][ T6262] loop0: detected capacity change from 0 to 1024 [ 89.811038][ T6260] loop1: detected capacity change from 0 to 1024 [pid 6260] mkdir("./file1", 0777 [pid 6264] <... openat resumed>) = 4 [pid 6263] chdir("./file0" [pid 6261] chdir("./file0" [pid 6260] <... mkdir resumed>) = 0 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6263] <... chdir resumed>) = 0 [pid 6262] <... mount resumed>) = 0 [pid 6260] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6264] close(3 [pid 6263] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6263] <... openat resumed>) = 4 [pid 6262] <... openat resumed>) = 3 [pid 6261] <... chdir resumed>) = 0 [pid 6262] chdir("./file1" [pid 6264] <... close resumed>) = 0 [pid 6262] <... chdir resumed>) = 0 [pid 6261] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6264] close(4 [pid 6262] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6264] <... close resumed>) = 0 [pid 6261] <... openat resumed>) = 4 [pid 6264] mkdir("./file1", 0777 [pid 6262] chdir("./file0" [pid 6263] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6261] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6264] <... mkdir resumed>) = 0 [pid 6264] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6263] <... creat resumed>) = 5 [pid 6262] <... chdir resumed>) = 0 [pid 6261] <... creat resumed>) = 5 [pid 6262] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6260] <... mount resumed>) = 0 [pid 6264] <... mount resumed>) = 0 [pid 6263] sync( [pid 6262] <... openat resumed>) = 4 [pid 6261] sync( [pid 6260] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6262] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6260] chdir("./file1" [pid 6264] <... openat resumed>) = 3 [pid 6260] <... chdir resumed>) = 0 [pid 6264] chdir("./file1" [pid 6260] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6264] <... chdir resumed>) = 0 [pid 6260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6260] chdir("./file0" [pid 6262] <... creat resumed>) = 5 [pid 6264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6264] chdir("./file0" [pid 6262] sync( [pid 6260] <... chdir resumed>) = 0 [ 89.857706][ T6264] loop4: detected capacity change from 0 to 1024 [pid 6260] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6264] <... chdir resumed>) = 0 [pid 6264] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6260] <... openat resumed>) = 4 [pid 6264] <... openat resumed>) = 4 [pid 6263] <... sync resumed>) = 0 [pid 6262] <... sync resumed>) = 0 [pid 6261] <... sync resumed>) = 0 [pid 6260] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6264] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6263] exit_group(0 [pid 6262] exit_group(0 [pid 6261] exit_group(0 [pid 6263] <... exit_group resumed>) = ? [pid 6262] <... exit_group resumed>) = ? [pid 6263] +++ exited with 0 +++ [pid 6262] +++ exited with 0 +++ [pid 6261] <... exit_group resumed>) = ? [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6262, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6260] <... creat resumed>) = 5 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6261] +++ exited with 0 +++ [pid 6260] sync( [pid 5831] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6264] <... creat resumed>) = 5 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6264] sync( [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6260] <... sync resumed>) = 0 [pid 6264] <... sync resumed>) = 0 [pid 6264] exit_group(0 [pid 6260] exit_group(0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6260] <... exit_group resumed>) = ? [pid 6264] <... exit_group resumed>) = ? [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] +++ exited with 0 +++ [pid 6260] +++ exited with 0 +++ [pid 5832] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] unlink("./84/binderfs" [pid 5832] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(3, [pid 5831] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./86/binderfs") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 5829] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5831] newfstatat(AT_FDCWD, "./84/file1", [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./84/binderfs" [pid 5831] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5832] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./86/file1", [pid 5831] <... openat resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5833] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5829] newfstatat(AT_FDCWD, "./84/file1", [pid 5833] newfstatat(3, "", [pid 5830] newfstatat(3, "", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5830] getdents64(3, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(4, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./84/binderfs" [pid 5830] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(4, [pid 5830] unlink("./83/binderfs" [pid 5833] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(4, "", [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(4, [pid 5833] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./84/file1", [pid 5832] newfstatat(4, "", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] close(4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./84/file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./83/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./83/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] close(4 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(4, [pid 5830] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(3, [pid 5833] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(4, "", [pid 5832] close(4 [pid 5830] newfstatat(4, "", [pid 5829] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] rmdir("./86/file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] rmdir("./84" [pid 5831] <... close resumed>) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./84/file1" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] close(4 [pid 5832] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./84/file1" [pid 5832] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5830] <... close resumed>) = 0 [pid 5829] mkdir("./85", 0777 [pid 5833] getdents64(3, [pid 5832] rmdir("./86" [pid 5831] <... close resumed>) = 0 [pid 5830] rmdir("./83/file1" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./84" [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] close(3 [pid 5832] mkdir("./87", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] mkdir("./85", 0777 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] rmdir("./84" [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] getdents64(3, [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] <... openat resumed>) = 3 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] mkdir("./85", 0777 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5830] close(3 [pid 5829] <... ioctl resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] close(3 [pid 5830] rmdir("./83" [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5832] close(3 [pid 5831] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5830] mkdir("./84", 0777 [pid 5829] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6265 attached [pid 6265] set_robust_list(0x555557df1660, 24 [pid 5833] <... openat resumed>) = 3 [pid 6265] <... set_robust_list resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6265 [pid 6265] chdir("./85" [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6265] <... chdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(3 [pid 6265] <... prctl resumed>) = 0 [pid 6265] setpgid(0, 0) = 0 [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6265] write(3, "1000", 4) = 4 [pid 6265] close(3) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6265] write(1, "executing program\n", 18executing program ) = 18 [pid 6265] memfd_create("syzkaller", 0) = 3 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 ./strace-static-x86_64: Process 6266 attached [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... openat resumed>) = 3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6266 [pid 5830] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6268 attached ./strace-static-x86_64: Process 6267 attached [pid 6266] set_robust_list(0x555557df1660, 24 [pid 5830] <... ioctl resumed>) = 0 [pid 6266] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6268 [pid 5830] close(3 [pid 6267] set_robust_list(0x555557df1660, 24 [pid 6266] chdir("./85" [pid 6267] <... set_robust_list resumed>) = 0 [pid 6267] chdir("./87") = 0 [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6267] setpgid(0, 0) = 0 [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6266] <... chdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6267 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 6267] <... openat resumed>) = 3 [pid 6266] setpgid(0, 0 [pid 6267] write(3, "1000", 4) = 4 [pid 6267] close(3) = 0 [pid 6267] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6267] write(1, "executing program\n", 18) = 18 [pid 6267] memfd_create("syzkaller", 0 [pid 6265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6268] set_robust_list(0x555557df1660, 24 [pid 6266] <... setpgid resumed>) = 0 [pid 6267] <... memfd_create resumed>) = 3 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6268] <... set_robust_list resumed>) = 0 [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... close resumed>) = 0 [pid 6268] chdir("./85" [pid 6266] <... openat resumed>) = 3 [pid 6265] <... write resumed>) = 524288 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6268] <... chdir resumed>) = 0 [pid 6266] write(3, "1000", 4 [pid 6265] munmap(0x7fd6d9800000, 138412032./strace-static-x86_64: Process 6269 attached [pid 6266] <... write resumed>) = 4 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6266] close(3 [pid 6269] set_robust_list(0x555557df1660, 24 [pid 6266] <... close resumed>) = 0 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6268] setpgid(0, 0 [pid 6267] <... write resumed>) = 524288 [pid 6265] <... munmap resumed>) = 0 [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6269 [pid 6269] chdir("./84" [pid 6268] <... setpgid resumed>) = 0 [pid 6269] <... chdir resumed>) = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6266] <... symlink resumed>) = 0 [pid 6269] setpgid(0, 0) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6266] write(1, "executing program\n", 18 [pid 6269] <... openat resumed>) = 3 [pid 6268] <... openat resumed>) = 3 [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 executing program [pid 6269] symlink("/dev/binderfs", "./binderfs" [pid 6266] <... write resumed>) = 18 [pid 6268] write(3, "1000", 4 [pid 6265] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6268] <... write resumed>) = 4 [pid 6266] memfd_create("syzkaller", 0 [pid 6269] <... symlink resumed>) = 0 [pid 6268] close(3 [pid 6267] munmap(0x7fd6d9800000, 138412032executing program [pid 6266] <... memfd_create resumed>) = 3 [pid 6265] <... openat resumed>) = 4 [pid 6269] write(1, "executing program\n", 18) = 18 [pid 6269] memfd_create("syzkaller", 0 [pid 6267] <... munmap resumed>) = 0 [pid 6265] ioctl(4, LOOP_SET_FD, 3 [pid 6269] <... memfd_create resumed>) = 3 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6268] <... close resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6265] <... ioctl resumed>) = 0 [pid 6268] symlink("/dev/binderfs", "./binderfs" [pid 6267] <... openat resumed>) = 4 [pid 6266] <... mmap resumed>) = 0x7fd6d9800000 [pid 6265] close(3 [pid 6268] <... symlink resumed>) = 0 [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 6265] <... close resumed>) = 0 executing program [pid 6269] <... write resumed>) = 524288 [pid 6268] write(1, "executing program\n", 18 [pid 6266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6265] close(4 [pid 6268] <... write resumed>) = 18 [pid 6268] memfd_create("syzkaller", 0 [pid 6265] <... close resumed>) = 0 [pid 6265] mkdir("./file1", 0777 [pid 6268] <... memfd_create resumed>) = 3 [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] <... ioctl resumed>) = 0 [pid 6266] <... write resumed>) = 524288 [pid 6265] <... mkdir resumed>) = 0 [pid 6269] munmap(0x7fd6d9800000, 138412032 [pid 6268] <... mmap resumed>) = 0x7fd6d9800000 [pid 6267] close(3 [pid 6265] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6269] <... munmap resumed>) = 0 [pid 6267] <... close resumed>) = 0 [pid 6267] close(4 [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6267] <... close resumed>) = 0 [pid 6266] munmap(0x7fd6d9800000, 138412032 [pid 6269] <... openat resumed>) = 4 [pid 6267] mkdir("./file1", 0777 [ 90.144484][ T6265] loop2: detected capacity change from 0 to 1024 [ 90.168465][ T6267] loop3: detected capacity change from 0 to 1024 [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 6268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6267] <... mkdir resumed>) = 0 [pid 6266] <... munmap resumed>) = 0 [pid 6267] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6266] ioctl(4, LOOP_SET_FD, 3 [pid 6269] <... ioctl resumed>) = 0 [pid 6268] <... write resumed>) = 524288 [pid 6267] <... mount resumed>) = 0 [pid 6266] <... ioctl resumed>) = 0 [pid 6265] <... mount resumed>) = 0 [pid 6268] munmap(0x7fd6d9800000, 138412032 [pid 6267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6265] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6267] <... openat resumed>) = 3 [pid 6267] chdir("./file1" [pid 6265] <... openat resumed>) = 3 [pid 6269] close(3 [pid 6267] <... chdir resumed>) = 0 [pid 6265] chdir("./file1" [pid 6269] <... close resumed>) = 0 [pid 6268] <... munmap resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6266] close(3 [pid 6265] <... chdir resumed>) = 0 [pid 6269] close(4 [pid 6268] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6266] <... close resumed>) = 0 [pid 6265] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6267] chdir("./file0" [pid 6266] close(4 [pid 6265] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6269] <... close resumed>) = 0 [pid 6266] <... close resumed>) = 0 [pid 6265] chdir("./file0" [pid 6269] mkdir("./file1", 0777) = 0 [pid 6268] <... openat resumed>) = 4 [pid 6267] <... chdir resumed>) = 0 [pid 6266] mkdir("./file1", 0777 [pid 6265] <... chdir resumed>) = 0 [pid 6269] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [ 90.196957][ T6269] loop1: detected capacity change from 0 to 1024 [ 90.210127][ T6266] loop0: detected capacity change from 0 to 1024 [pid 6267] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 6266] <... mkdir resumed>) = 0 [pid 6265] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6267] <... openat resumed>) = 4 [pid 6265] <... openat resumed>) = 4 [pid 6266] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6267] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6265] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6267] <... creat resumed>) = 5 [pid 6267] sync( [pid 6265] <... creat resumed>) = 5 [pid 6266] <... mount resumed>) = 0 [pid 6266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6265] sync( [pid 6269] <... mount resumed>) = 0 [pid 6269] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6266] chdir("./file1" [pid 6269] <... openat resumed>) = 3 [pid 6266] <... chdir resumed>) = 0 [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6269] chdir("./file1" [pid 6268] <... ioctl resumed>) = 0 [pid 6266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6269] <... chdir resumed>) = 0 [pid 6268] close(3 [pid 6266] chdir("./file0" [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6268] <... close resumed>) = 0 [pid 6269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6268] close(4 [pid 6269] chdir("./file0") = 0 [pid 6269] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6268] <... close resumed>) = 0 [pid 6266] <... chdir resumed>) = 0 [pid 6268] mkdir("./file1", 0777 [pid 6269] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6268] <... mkdir resumed>) = 0 [pid 6266] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6268] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6266] <... openat resumed>) = 4 [pid 6269] <... creat resumed>) = 5 [pid 6267] <... sync resumed>) = 0 [pid 6265] <... sync resumed>) = 0 [pid 6269] sync( [pid 6267] exit_group(0 [ 90.251000][ T6268] loop4: detected capacity change from 0 to 1024 [pid 6265] exit_group(0 [pid 6266] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6267] <... exit_group resumed>) = ? [pid 6265] <... exit_group resumed>) = ? [pid 6267] +++ exited with 0 +++ [pid 6265] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6266] <... creat resumed>) = 5 [pid 6266] sync( [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6268] <... mount resumed>) = 0 [pid 5831] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, [pid 6268] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6268] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] chdir("./file1") = 0 [pid 6268] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6268] chdir("./file0" [pid 5832] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", [pid 6268] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6268] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5832] getdents64(3, [pid 6268] <... openat resumed>) = 4 [pid 6268] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6268] sync( [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6269] <... sync resumed>) = 0 [pid 6268] <... sync resumed>) = 0 [pid 6266] <... sync resumed>) = 0 [pid 5831] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6269] exit_group(0 [pid 6268] exit_group(0 [pid 5832] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] exit_group(0 [pid 6269] <... exit_group resumed>) = ? [pid 6268] <... exit_group resumed>) = ? [pid 6266] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6268] +++ exited with 0 +++ [pid 6266] +++ exited with 0 +++ [pid 5832] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6269] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] unlink("./87/binderfs" [pid 5831] unlink("./85/binderfs" [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5832] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5832] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./87/file1", [pid 5831] newfstatat(AT_FDCWD, "./85/file1", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 5831] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5830] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 5831] close(4 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5832] rmdir("./87/file1" [pid 5831] <... close resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5829] newfstatat(3, "", [pid 5833] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./85/file1" [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 5833] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5829] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5833] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./84/binderfs" [pid 5829] unlink("./85/binderfs" [pid 5833] unlink("./85/binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 5829] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(3, [pid 5830] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5829] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./87" [pid 5831] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./85/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./85" [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", [pid 5832] mkdir("./88", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./85/file1") = 0 [pid 5829] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] mkdir("./86", 0777 [pid 5829] rmdir("./85" [pid 5833] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./85/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] mkdir("./86", 0777 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5833] newfstatat(4, "", [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] getdents64(4, [pid 5832] close(3 [pid 5831] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] getdents64(4, [pid 5829] <... ioctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5829] close(3 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3 [pid 5830] newfstatat(AT_FDCWD, "./84/file1", [pid 5833] rmdir("./85/file1") = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./85" [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./84/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... rmdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] mkdir("./86", 0777 [pid 5830] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6271 attached ./strace-static-x86_64: Process 6270 attached [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6272 attached [pid 6271] set_robust_list(0x555557df1660, 24 [pid 6270] set_robust_list(0x555557df1660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6270 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6271 [pid 5830] newfstatat(4, "", [pid 6272] set_robust_list(0x555557df1660, 24 [pid 6271] <... set_robust_list resumed>) = 0 [pid 6270] <... set_robust_list resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6272 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6271] chdir("./86" [pid 6270] chdir("./88" [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] getdents64(4, [pid 6272] chdir("./86" [pid 6271] <... chdir resumed>) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6272] <... chdir resumed>) = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(3 [pid 5830] getdents64(4, [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6272] <... prctl resumed>) = 0 [pid 5830] close(4 [pid 6272] setpgid(0, 0 [pid 5830] <... close resumed>) = 0 [pid 6272] <... setpgid resumed>) = 0 [pid 5830] rmdir("./84/file1" [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 6271] <... prctl resumed>) = 0 [pid 6270] <... prctl resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] getdents64(3, [pid 6272] <... openat resumed>) = 3 [pid 6271] setpgid(0, 0 [pid 6270] setpgid(0, 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6271] <... setpgid resumed>) = 0 [pid 6270] <... setpgid resumed>) = 0 [pid 5830] close(3 [pid 6272] write(3, "1000", 4 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... close resumed>) = 0 [pid 6272] <... write resumed>) = 4 [pid 6270] <... openat resumed>) = 3 [pid 6272] close(3 [pid 5830] rmdir("./84" [pid 6270] write(3, "1000", 4./strace-static-x86_64: Process 6273 attached [pid 6272] <... close resumed>) = 0 [pid 6271] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 6271] write(3, "1000", 4 [pid 6270] <... write resumed>) = 4 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6273 [pid 6272] <... symlink resumed>) = 0 [pid 6270] close(3 [pid 6273] set_robust_list(0x555557df1660, 24 [pid 6270] <... close resumed>) = 0 [pid 6271] <... write resumed>) = 4 [pid 6271] close(3 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6271] <... close resumed>) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs" executing program [pid 6273] chdir("./86" [pid 6272] write(1, "executing program\n", 18 [pid 5830] mkdir("./85", 0777 [pid 6273] <... chdir resumed>) = 0 [pid 6272] <... write resumed>) = 18 [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 6270] <... symlink resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6272] memfd_create("syzkaller", 0 [pid 6273] <... prctl resumed>) = 0 [pid 6273] setpgid(0, 0 [pid 6272] <... memfd_create resumed>) = 3 [pid 6271] <... symlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6273] <... setpgid resumed>) = 0 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6271] write(1, "executing program\n", 18 [pid 6270] write(1, "executing program\n", 18 [pid 5830] <... openat resumed>) = 3 executing program executing program [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6272] <... mmap resumed>) = 0x7fd6d9800000 [pid 6271] <... write resumed>) = 18 [pid 6270] <... write resumed>) = 18 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6273] <... openat resumed>) = 3 [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3) = 0 [pid 6273] write(3, "1000", 4 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6271] memfd_create("syzkaller", 0 [pid 6270] memfd_create("syzkaller", 0 [pid 6273] <... write resumed>) = 4 [pid 6271] <... memfd_create resumed>) = 3 [pid 6270] <... memfd_create resumed>) = 3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6273] close(3 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6274 attached [pid 6273] <... close resumed>) = 0 [pid 6271] <... mmap resumed>) = 0x7fd6d9800000 [pid 6270] <... mmap resumed>) = 0x7fd6d9800000 [pid 6273] symlink("/dev/binderfs", "./binderfs" [pid 6272] <... write resumed>) = 524288 [pid 6274] set_robust_list(0x555557df1660, 24 [pid 6273] <... symlink resumed>) = 0 [pid 6274] <... set_robust_list resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6274 [pid 6274] chdir("./85") = 0 [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 6274] setpgid(0, 0) = 0 [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6273] write(1, "executing program\n", 18) = 18 [pid 6273] memfd_create("syzkaller", 0 [pid 6274] <... openat resumed>) = 3 [pid 6273] <... memfd_create resumed>) = 3 [pid 6272] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6274] write(3, "1000", 4) = 4 [pid 6274] close(3) = 0 [pid 6274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6274] write(1, "executing program\n", 18 [pid 6272] <... openat resumed>) = 4 executing program [pid 6274] <... write resumed>) = 18 [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 6274] memfd_create("syzkaller", 0 [pid 6273] <... mmap resumed>) = 0x7fd6d9800000 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] <... memfd_create resumed>) = 3 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] <... mmap resumed>) = 0x7fd6d9800000 [pid 6270] <... write resumed>) = 524288 [pid 6274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6273] <... write resumed>) = 524288 [pid 6272] <... ioctl resumed>) = 0 [pid 6271] <... write resumed>) = 524288 [pid 6270] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6271] munmap(0x7fd6d9800000, 138412032 [pid 6270] <... openat resumed>) = 4 [pid 6273] munmap(0x7fd6d9800000, 138412032 [pid 6271] <... munmap resumed>) = 0 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6272] close(3) = 0 [pid 6272] close(4) = 0 [pid 6272] mkdir("./file1", 0777) = 0 [pid 6274] <... write resumed>) = 524288 [pid 6272] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6273] <... munmap resumed>) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6273] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 6272] <... mount resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6272] chdir("./file1") = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6274] munmap(0x7fd6d9800000, 138412032 [pid 6272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6274] <... munmap resumed>) = 0 [pid 6272] chdir("./file0" [pid 6271] <... openat resumed>) = 4 [pid 6274] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 90.514850][ T6272] loop0: detected capacity change from 0 to 1024 [ 90.554674][ T6270] loop3: detected capacity change from 0 to 1024 [pid 6271] ioctl(4, LOOP_SET_FD, 3 [pid 6274] <... openat resumed>) = 4 [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 6273] <... ioctl resumed>) = 0 [pid 6274] <... ioctl resumed>) = 0 [pid 6273] close(3 [pid 6271] <... ioctl resumed>) = 0 [pid 6270] <... ioctl resumed>) = 0 [pid 6273] <... close resumed>) = 0 [pid 6271] close(3 [pid 6273] close(4 [pid 6274] close(3 [pid 6273] <... close resumed>) = 0 [pid 6274] <... close resumed>) = 0 [pid 6273] mkdir("./file1", 0777 [pid 6270] close(3 [pid 6274] close(4 [pid 6273] <... mkdir resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6274] <... close resumed>) = 0 [pid 6270] close(4 [pid 6274] mkdir("./file1", 0777 [pid 6273] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6274] <... mkdir resumed>) = 0 [pid 6272] <... chdir resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6274] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6273] <... mount resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6270] mkdir("./file1", 0777 [pid 6273] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6272] <... openat resumed>) = 4 [pid 6270] <... mkdir resumed>) = 0 [pid 6273] <... openat resumed>) = 3 [pid 6270] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6272] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6273] chdir("./file1" [pid 6272] <... creat resumed>) = 5 [pid 6271] <... close resumed>) = 0 [pid 6273] <... chdir resumed>) = 0 [pid 6272] sync( [pid 6273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6271] close(4 [pid 6273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6271] <... close resumed>) = 0 [pid 6273] chdir("./file0" [ 90.575837][ T6273] loop4: detected capacity change from 0 to 1024 [ 90.577163][ T6274] loop1: detected capacity change from 0 to 1024 [ 90.582475][ T6271] loop2: detected capacity change from 0 to 1024 [pid 6271] mkdir("./file1", 0777 [pid 6273] <... chdir resumed>) = 0 [pid 6274] <... mount resumed>) = 0 [pid 6274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6273] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6274] <... openat resumed>) = 3 [pid 6274] chdir("./file1") = 0 [pid 6274] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6274] chdir("./file0" [pid 6270] <... mount resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file1") = 0 [pid 6274] <... chdir resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6273] <... openat resumed>) = 4 [pid 6270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6274] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6273] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6270] chdir("./file0" [pid 6271] <... mkdir resumed>) = 0 [pid 6271] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6274] <... openat resumed>) = 4 [pid 6274] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6270] <... chdir resumed>) = 0 [pid 6274] <... creat resumed>) = 5 [pid 6273] <... creat resumed>) = 5 [pid 6273] sync( [pid 6271] <... mount resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6270] <... openat resumed>) = 4 [pid 6271] <... openat resumed>) = 3 [pid 6274] sync( [pid 6271] chdir("./file1" [pid 6270] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6271] <... chdir resumed>) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6272] <... sync resumed>) = 0 [pid 6272] exit_group(0 [pid 6271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6272] <... exit_group resumed>) = ? [pid 6271] chdir("./file0" [pid 6270] <... creat resumed>) = 5 [pid 6272] +++ exited with 0 +++ [pid 6270] sync( [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6273] <... sync resumed>) = 0 [pid 6271] <... chdir resumed>) = 0 [pid 6274] <... sync resumed>) = 0 [pid 5829] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6274] exit_group(0 [pid 6273] exit_group(0 [pid 6271] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6270] <... sync resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6270] exit_group(0 [pid 6274] <... exit_group resumed>) = ? [pid 6270] <... exit_group resumed>) = ? [pid 5829] <... openat resumed>) = 3 [pid 6273] <... exit_group resumed>) = ? [pid 6271] <... openat resumed>) = 4 [pid 5829] newfstatat(3, "", [pid 6274] +++ exited with 0 +++ [pid 6273] +++ exited with 0 +++ [pid 6271] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6270] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6274, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5829] getdents64(3, [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6271] <... creat resumed>) = 5 [pid 5830] <... openat resumed>) = 3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] newfstatat(3, "", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6271] sync( [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5833] <... restart_syscall resumed>) = 0 [pid 5830] getdents64(3, [pid 5832] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] unlink("./86/binderfs" [pid 5833] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... unlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(3, "", [pid 5830] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5829] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6271] <... sync resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] unlink("./85/binderfs" [pid 5829] <... umount2 resumed>) = 0 [pid 6271] exit_group(0 [pid 5833] getdents64(3, [pid 5832] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... unlink resumed>) = 0 [pid 6271] <... exit_group resumed>) = ? [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5830] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./88/binderfs" [pid 6271] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] unlink("./86/binderfs" [pid 5829] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... restart_syscall resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./86/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5831] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./88/file1", [pid 5831] <... openat resumed>) = 3 [pid 5830] newfstatat(AT_FDCWD, "./85/file1", [pid 5829] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(4, "", [pid 5833] newfstatat(AT_FDCWD, "./86/file1", [pid 5832] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./85/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... openat resumed>) = 4 [pid 5831] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5831] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5830] newfstatat(4, "", [pid 5829] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 5831] unlink("./86/binderfs" [pid 5830] getdents64(4, [pid 5829] close(4 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... unlink resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5831] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] rmdir("./86/file1" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] close(4 [pid 5832] close(4 [pid 5830] close(4 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] getdents64(3, [pid 5833] rmdir("./86/file1" [pid 5832] rmdir("./88/file1" [pid 5830] rmdir("./85/file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3 [pid 5833] close(3 [pid 5829] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] rmdir("./86" [pid 5833] rmdir("./86") = 0 [pid 5832] getdents64(3, [pid 5830] getdents64(3, [pid 5829] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5832] close(3 [pid 5831] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... close resumed>) = 0 [pid 5833] mkdir("./87", 0777 [pid 5832] rmdir("./88" [pid 5831] newfstatat(AT_FDCWD, "./86/file1", [pid 5830] rmdir("./85" [pid 5829] mkdir("./87", 0777 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] mkdir("./89", 0777 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... openat resumed>) = 4 [pid 5833] <... ioctl resumed>) = 0 [pid 5833] close(3 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5830] mkdir("./86", 0777 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... mkdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] <... ioctl resumed>) = 0 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 5833] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] getdents64(4, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 3 [pid 5831] getdents64(4, ./strace-static-x86_64: Process 6275 attached [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6275 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6275] set_robust_list(0x555557df1660, 24 [pid 5831] <... close resumed>) = 0 [pid 6275] <... set_robust_list resumed>) = 0 [pid 5831] rmdir("./86/file1" [pid 5830] <... ioctl resumed>) = 0 [pid 6275] chdir("./87" [pid 5830] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6275] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6276 attached [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] getdents64(3, [pid 5830] <... close resumed>) = 0 [pid 6275] <... prctl resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6275] setpgid(0, 0 [pid 5831] close(3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6276 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6276] set_robust_list(0x555557df1660, 24 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6276] <... set_robust_list resumed>) = 0 [pid 6275] <... setpgid resumed>) = 0 [pid 5831] <... close resumed>) = 0 ./strace-static-x86_64: Process 6278 attached [pid 6276] chdir("./87" [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] rmdir("./86"./strace-static-x86_64: Process 6277 attached [pid 6275] <... openat resumed>) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6277 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6278 [pid 5831] <... rmdir resumed>) = 0 [pid 6277] set_robust_list(0x555557df1660, 24 [pid 6276] <... chdir resumed>) = 0 [pid 6275] write(3, "1000", 4 [pid 5831] mkdir("./87", 0777 [pid 6277] <... set_robust_list resumed>) = 0 [pid 6276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] <... write resumed>) = 4 [pid 6278] set_robust_list(0x555557df1660, 24 [pid 6277] chdir("./89" [pid 6275] close(3 [pid 6278] <... set_robust_list resumed>) = 0 [pid 6276] <... prctl resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6278] chdir("./86"executing program [pid 6277] <... chdir resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6278] <... chdir resumed>) = 0 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6276] setpgid(0, 0 [pid 6275] symlink("/dev/binderfs", "./binderfs" [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6277] <... prctl resumed>) = 0 [pid 6276] <... setpgid resumed>) = 0 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] <... symlink resumed>) = 0 [pid 6278] <... prctl resumed>) = 0 [pid 6278] setpgid(0, 0 [pid 6276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6278] <... setpgid resumed>) = 0 [pid 6277] setpgid(0, 0 [pid 6275] write(1, "executing program\n", 18 [pid 5831] <... openat resumed>) = 3 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6277] <... setpgid resumed>) = 0 [pid 6276] <... openat resumed>) = 3 [pid 6275] <... write resumed>) = 18 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6278] <... openat resumed>) = 3 [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6276] write(3, "1000", 4 [pid 6275] memfd_create("syzkaller", 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6278] write(3, "1000", 4 [pid 6276] <... write resumed>) = 4 [pid 6277] <... openat resumed>) = 3 [pid 6275] <... memfd_create resumed>) = 3 [pid 5831] close(3 [pid 6278] <... write resumed>) = 4 [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6278] write(1, "executing program\n", 18 [pid 6277] write(3, "1000", 4 [pid 6276] close(3 [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... close resumed>) = 0 [pid 6277] <... write resumed>) = 4 [pid 6276] <... close resumed>) = 0 [pid 6275] <... mmap resumed>) = 0x7fd6d9800000 [pid 6277] close(3 [pid 6276] symlink("/dev/binderfs", "./binderfs" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6278] <... write resumed>) = 18 [pid 6278] memfd_create("syzkaller", 0 [pid 6277] <... close resumed>) = 0 ./strace-static-x86_64: Process 6279 attached [pid 6276] <... symlink resumed>) = 0 [pid 6277] symlink("/dev/binderfs", "./binderfs" [pid 6279] set_robust_list(0x555557df1660, 24 [pid 6278] <... memfd_create resumed>) = 3 [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program executing program [pid 6279] <... set_robust_list resumed>) = 0 [pid 6278] <... mmap resumed>) = 0x7fd6d9800000 [pid 6277] <... symlink resumed>) = 0 [pid 6276] write(1, "executing program\n", 18 [pid 6279] chdir("./87" [pid 6278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6277] write(1, "executing program\n", 18 [pid 6276] <... write resumed>) = 18 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6279 [pid 6277] <... write resumed>) = 18 [pid 6279] <... chdir resumed>) = 0 [pid 6277] memfd_create("syzkaller", 0 [pid 6276] memfd_create("syzkaller", 0 [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6276] <... memfd_create resumed>) = 3 [pid 6279] <... prctl resumed>) = 0 [pid 6279] setpgid(0, 0 [pid 6275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6277] <... memfd_create resumed>) = 3 [pid 6279] <... setpgid resumed>) = 0 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] <... mmap resumed>) = 0x7fd6d9800000 [pid 6279] <... openat resumed>) = 3 [pid 6277] <... mmap resumed>) = 0x7fd6d9800000 [pid 6279] write(3, "1000", 4) = 4 [pid 6279] close(3) = 0 [pid 6279] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6279] write(1, "executing program\n", 18) = 18 [pid 6279] memfd_create("syzkaller", 0) = 3 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6275] <... write resumed>) = 524288 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6278] <... write resumed>) = 524288 [pid 6277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6275] munmap(0x7fd6d9800000, 138412032 [pid 6279] <... mmap resumed>) = 0x7fd6d9800000 [pid 6275] <... munmap resumed>) = 0 [pid 6278] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6278] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6278] ioctl(4, LOOP_SET_FD, 3 [pid 6277] <... write resumed>) = 524288 [pid 6276] <... write resumed>) = 524288 [pid 6275] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6277] munmap(0x7fd6d9800000, 138412032 [pid 6275] ioctl(4, LOOP_SET_FD, 3 [pid 6276] munmap(0x7fd6d9800000, 138412032 [pid 6279] <... write resumed>) = 524288 [pid 6276] <... munmap resumed>) = 0 [pid 6279] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6277] <... munmap resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6276] <... openat resumed>) = 4 [pid 6279] <... openat resumed>) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6278] <... ioctl resumed>) = 0 [pid 6277] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6275] <... ioctl resumed>) = 0 [pid 6277] <... openat resumed>) = 4 [pid 6277] ioctl(4, LOOP_SET_FD, 3 [pid 6275] close(3 [pid 6279] <... ioctl resumed>) = 0 [pid 6278] close(3 [pid 6277] <... ioctl resumed>) = 0 [pid 6276] <... ioctl resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6279] close(3 [pid 6276] close(3 [pid 6275] close(4 [pid 6279] <... close resumed>) = 0 [pid 6278] <... close resumed>) = 0 [pid 6277] close(3 [pid 6276] <... close resumed>) = 0 [pid 6279] close(4 [pid 6278] close(4 [pid 6277] <... close resumed>) = 0 [pid 6276] close(4 [pid 6275] <... close resumed>) = 0 [pid 6279] <... close resumed>) = 0 [pid 6278] <... close resumed>) = 0 [pid 6277] close(4 [pid 6276] <... close resumed>) = 0 [pid 6275] mkdir("./file1", 0777 [pid 6279] mkdir("./file1", 0777 [pid 6278] mkdir("./file1", 0777 [pid 6279] <... mkdir resumed>) = 0 [pid 6278] <... mkdir resumed>) = 0 [pid 6277] <... close resumed>) = 0 [pid 6276] mkdir("./file1", 0777 [pid 6275] <... mkdir resumed>) = 0 [pid 6278] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6277] mkdir("./file1", 0777 [pid 6275] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6277] <... mkdir resumed>) = 0 [pid 6276] <... mkdir resumed>) = 0 [pid 6276] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6279] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6277] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6278] <... mount resumed>) = 0 [ 90.908568][ T6278] loop1: detected capacity change from 0 to 1024 [ 90.918252][ T6275] loop4: detected capacity change from 0 to 1024 [ 90.931646][ T6279] loop2: detected capacity change from 0 to 1024 [ 90.939407][ T6276] loop0: detected capacity change from 0 to 1024 [ 90.946912][ T6277] loop3: detected capacity change from 0 to 1024 [pid 6278] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6279] <... mount resumed>) = 0 [pid 6278] <... openat resumed>) = 3 [pid 6275] <... mount resumed>) = 0 [pid 6279] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6278] chdir("./file1" [pid 6279] <... openat resumed>) = 3 [pid 6278] <... chdir resumed>) = 0 [pid 6279] chdir("./file1" [pid 6278] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6275] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6279] <... chdir resumed>) = 0 [pid 6278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6276] <... mount resumed>) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6277] <... mount resumed>) = 0 [pid 6279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6278] chdir("./file0" [pid 6279] chdir("./file0" [pid 6277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6275] <... openat resumed>) = 3 [pid 6276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6275] chdir("./file1" [pid 6277] <... openat resumed>) = 3 [pid 6276] <... openat resumed>) = 3 [pid 6275] <... chdir resumed>) = 0 [pid 6279] <... chdir resumed>) = 0 [pid 6278] <... chdir resumed>) = 0 [pid 6277] chdir("./file1" [pid 6276] chdir("./file1" [pid 6275] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6277] <... chdir resumed>) = 0 [pid 6276] <... chdir resumed>) = 0 [pid 6275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6279] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6278] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6277] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6275] chdir("./file0" [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6279] <... openat resumed>) = 4 [pid 6277] chdir("./file0" [pid 6276] chdir("./file0" [pid 6279] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... openat resumed>) = 4 [pid 6277] <... chdir resumed>) = 0 [pid 6276] <... chdir resumed>) = 0 [pid 6275] <... chdir resumed>) = 0 [pid 6278] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6277] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6275] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6279] <... creat resumed>) = 5 [pid 6276] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6275] <... openat resumed>) = 4 [pid 6279] sync( [pid 6277] <... openat resumed>) = 4 [pid 6276] <... openat resumed>) = 4 [pid 6275] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... creat resumed>) = 5 [pid 6277] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] sync( [pid 6276] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6277] <... creat resumed>) = 5 [pid 6277] sync( [pid 6276] <... creat resumed>) = 5 [pid 6275] <... creat resumed>) = 5 [pid 6276] sync( [pid 6275] sync( [pid 6278] <... sync resumed>) = 0 [pid 6277] <... sync resumed>) = 0 [pid 6277] exit_group(0 [pid 6279] <... sync resumed>) = 0 [pid 6278] exit_group(0 [pid 6277] <... exit_group resumed>) = ? [pid 6276] <... sync resumed>) = 0 [pid 6275] <... sync resumed>) = 0 [pid 6278] <... exit_group resumed>) = ? [pid 6275] exit_group(0 [pid 6279] exit_group(0 [pid 6278] +++ exited with 0 +++ [pid 6277] +++ exited with 0 +++ [pid 6276] exit_group(0 [pid 6275] <... exit_group resumed>) = ? [pid 6279] <... exit_group resumed>) = ? [pid 6279] +++ exited with 0 +++ [pid 6276] <... exit_group resumed>) = ? [pid 6275] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5832] <... restart_syscall resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] +++ exited with 0 +++ [pid 5832] newfstatat(3, "", [pid 5831] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6276, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5832] getdents64(3, [pid 5831] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(3, "", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(AT_FDCWD, "./89/binderfs", [pid 5830] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./89/binderfs" [pid 5831] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5830] unlink("./86/binderfs" [pid 5833] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./87/binderfs" [pid 5830] <... unlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... unlink resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5832] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5833] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = 0 [pid 5829] getdents64(3, [pid 5833] unlink("./87/binderfs" [pid 5832] newfstatat(AT_FDCWD, "./89/file1", [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] <... unlink resumed>) = 0 [pid 5829] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./87/binderfs" [pid 5833] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5832] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] newfstatat(AT_FDCWD, "./86/file1", [pid 5832] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(4, "", [pid 5830] umount2("./86/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5830] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5829] <... umount2 resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(AT_FDCWD, "./87/file1", [pid 5830] newfstatat(4, "", [pid 5832] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(4, [pid 5829] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./87/file1", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] newfstatat(AT_FDCWD, "./87/file1", [pid 5833] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./89/file1" [pid 5831] <... openat resumed>) = 4 [pid 5830] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] close(4 [pid 5829] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5832] getdents64(3, [pid 5831] getdents64(4, [pid 5830] <... close resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] rmdir("./86/file1" [pid 5829] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5832] close(3 [pid 5831] getdents64(4, [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] rmdir("./89" [pid 5831] close(4 [pid 5833] close(4 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5830] getdents64(3, [pid 5829] newfstatat(4, "", [pid 5833] <... close resumed>) = 0 [pid 5831] rmdir("./87/file1" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] rmdir("./87/file1" [pid 5829] getdents64(4, [pid 5833] <... rmdir resumed>) = 0 [pid 5832] mkdir("./90", 0777 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] getdents64(3, [pid 5833] getdents64(3, [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] getdents64(4, [pid 5833] close(3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5829] close(4 [pid 5833] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./86" [pid 5833] rmdir("./87" [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] close(3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./87" [pid 5829] rmdir("./87/file1" [pid 5833] <... rmdir resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... rmdir resumed>) = 0 [pid 5830] mkdir("./87", 0777 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 5833] mkdir("./88", 0777 [pid 5832] close(3 [pid 5830] <... mkdir resumed>) = 0 [pid 5831] mkdir("./88", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = 0 [pid 5831] close(3 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] <... mkdir resumed>) = 0 [pid 5829] getdents64(3, [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] close(3) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5829] rmdir("./87" [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... rmdir resumed>) = 0 [pid 5829] mkdir("./88", 0777./strace-static-x86_64: Process 6281 attached ./strace-static-x86_64: Process 6280 attached [pid 5833] close(3 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... mkdir resumed>) = 0 [pid 6281] set_robust_list(0x555557df1660, 24./strace-static-x86_64: Process 6282 attached [pid 6280] set_robust_list(0x555557df1660, 24) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6281 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6282 [pid 6280] chdir("./88" [pid 6282] set_robust_list(0x555557df1660, 24 [pid 6281] <... set_robust_list resumed>) = 0 [pid 6280] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6280 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6281] chdir("./90" [pid 6280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6282] <... set_robust_list resumed>) = 0 [pid 6281] <... chdir resumed>) = 0 [pid 6280] <... prctl resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 6282] chdir("./87" [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6280] setpgid(0, 0 [pid 6282] <... chdir resumed>) = 0 [pid 6280] <... setpgid resumed>) = 0 [pid 6280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6282] setpgid(0, 0) = 0 [pid 6280] <... openat resumed>) = 3 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6280] write(3, "1000", 4executing program [pid 6282] <... openat resumed>) = 3 [pid 6281] <... prctl resumed>) = 0 [pid 6280] <... write resumed>) = 4 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6280] close(3) = 0 [pid 6280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6280] write(1, "executing program\n", 18 [pid 6282] write(3, "1000", 4 [pid 6280] <... write resumed>) = 18 [pid 6282] <... write resumed>) = 4 [pid 6280] memfd_create("syzkaller", 0 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs" [pid 6281] setpgid(0, 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... ioctl resumed>) = 0 [pid 6281] <... setpgid resumed>) = 0 [pid 6280] <... memfd_create resumed>) = 3 [pid 5829] close(3 [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] <... symlink resumed>) = 0 [pid 6280] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 6283 attached [pid 6282] write(1, "executing program\n", 18 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 executing program [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6283 [pid 5829] <... close resumed>) = 0 [pid 6283] set_robust_list(0x555557df1660, 24 [pid 6282] <... write resumed>) = 18 [pid 6283] <... set_robust_list resumed>) = 0 [pid 6282] memfd_create("syzkaller", 0 [pid 6283] chdir("./88" [pid 6282] <... memfd_create resumed>) = 3 [pid 6283] <... chdir resumed>) = 0 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6281] <... openat resumed>) = 3 [pid 6281] write(3, "1000", 4 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6282] <... mmap resumed>) = 0x7fd6d9800000 [pid 6281] <... write resumed>) = 4 [pid 6283] <... prctl resumed>) = 0 [pid 6281] close(3 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6283] setpgid(0, 0 [pid 6281] <... close resumed>) = 0 [pid 6283] <... setpgid resumed>) = 0 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6281] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6284 attached [pid 6283] <... openat resumed>) = 3 [pid 6281] <... symlink resumed>) = 0 [pid 6284] set_robust_list(0x555557df1660, 24 [pid 6281] write(1, "executing program\n", 18executing program ) = 18 [pid 6283] write(3, "1000", 4 [pid 6284] <... set_robust_list resumed>) = 0 [pid 6283] <... write resumed>) = 4 [pid 6281] memfd_create("syzkaller", 0 [pid 6283] close(3 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6284 [pid 6281] <... memfd_create resumed>) = 3 executing program [pid 6284] chdir("./88" [pid 6283] <... close resumed>) = 0 [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6283] symlink("/dev/binderfs", "./binderfs" [pid 6281] <... mmap resumed>) = 0x7fd6d9800000 [pid 6283] <... symlink resumed>) = 0 [pid 6283] write(1, "executing program\n", 18) = 18 [pid 6283] memfd_create("syzkaller", 0) = 3 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6284] <... chdir resumed>) = 0 [pid 6282] <... write resumed>) = 524288 [pid 6281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6280] <... write resumed>) = 524288 [pid 6284] <... prctl resumed>) = 0 [pid 6280] munmap(0x7fd6d9800000, 138412032 [pid 6284] setpgid(0, 0 [pid 6280] <... munmap resumed>) = 0 [pid 6284] <... setpgid resumed>) = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6280] <... openat resumed>) = 4 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6284] <... openat resumed>) = 3 [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6284] write(3, "1000", 4 [pid 6282] munmap(0x7fd6d9800000, 138412032) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6284] <... write resumed>) = 4 [pid 6284] close(3) = 0 [pid 6282] ioctl(4, LOOP_SET_FD, 3 [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 6283] <... write resumed>) = 524288 [pid 6281] <... write resumed>) = 524288 [pid 6280] <... ioctl resumed>) = 0 [pid 6284] <... symlink resumed>) = 0 executing program [pid 6284] write(1, "executing program\n", 18) = 18 [pid 6284] memfd_create("syzkaller", 0 [pid 6283] munmap(0x7fd6d9800000, 138412032 [pid 6281] munmap(0x7fd6d9800000, 138412032 [pid 6280] close(3) = 0 [pid 6282] <... ioctl resumed>) = 0 [pid 6284] <... memfd_create resumed>) = 3 [pid 6283] <... munmap resumed>) = 0 [pid 6281] <... munmap resumed>) = 0 [pid 6280] close(4 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6280] <... close resumed>) = 0 [pid 6280] mkdir("./file1", 0777 [pid 6284] <... mmap resumed>) = 0x7fd6d9800000 [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] mkdir("./file1", 0777) = 0 [pid 6282] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6281] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6280] <... mkdir resumed>) = 0 [ 91.228739][ T6280] loop2: detected capacity change from 0 to 1024 [ 91.243583][ T6282] loop1: detected capacity change from 0 to 1024 [pid 6283] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6281] <... openat resumed>) = 4 [pid 6283] <... openat resumed>) = 4 [pid 6281] ioctl(4, LOOP_SET_FD, 3 [pid 6282] <... mount resumed>) = 0 [pid 6282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6282] chdir("./file1") = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6282] chdir("./file0") = 0 [pid 6282] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6281] <... ioctl resumed>) = 0 [pid 6283] ioctl(4, LOOP_SET_FD, 3 [pid 6284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6282] <... openat resumed>) = 4 [pid 6282] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6282] sync( [pid 6283] <... ioctl resumed>) = 0 [pid 6280] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6284] <... write resumed>) = 524288 [pid 6281] close(3 [pid 6284] munmap(0x7fd6d9800000, 138412032 [pid 6283] close(3 [pid 6282] <... sync resumed>) = 0 [pid 6280] <... mount resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 6283] <... close resumed>) = 0 [pid 6281] close(4) = 0 [pid 6280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6284] <... munmap resumed>) = 0 [pid 6283] close(4 [pid 6282] exit_group(0 [pid 6281] mkdir("./file1", 0777 [pid 6284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6283] <... close resumed>) = 0 [pid 6282] <... exit_group resumed>) = ? [pid 6281] <... mkdir resumed>) = 0 [pid 6280] chdir("./file1" [pid 6284] <... openat resumed>) = 4 [pid 6283] mkdir("./file1", 0777 [pid 6281] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6280] <... chdir resumed>) = 0 [pid 6283] <... mkdir resumed>) = 0 [ 91.285770][ T6281] loop3: detected capacity change from 0 to 1024 [ 91.294236][ T6283] loop4: detected capacity change from 0 to 1024 [pid 6280] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6284] ioctl(4, LOOP_SET_FD, 3 [pid 6280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6283] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6282] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6280] chdir("./file0" [pid 5830] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] <... chdir resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6280] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] newfstatat(3, "", [pid 6284] <... ioctl resumed>) = 0 [pid 6281] <... mount resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6281] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] getdents64(3, [pid 6284] close(3 [pid 6281] <... openat resumed>) = 3 [pid 6280] <... openat resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6284] <... close resumed>) = 0 [pid 6283] <... mount resumed>) = 0 [pid 6281] chdir("./file1" [pid 6280] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6284] close(4 [pid 6281] <... chdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6283] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6284] <... close resumed>) = 0 [pid 6281] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6284] mkdir("./file1", 0777 [pid 6283] <... openat resumed>) = 3 [pid 6281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6283] chdir("./file1") = 0 [pid 6284] <... mkdir resumed>) = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6281] chdir("./file0" [pid 6280] <... creat resumed>) = 5 [pid 6283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6280] sync( [pid 6283] chdir("./file0" [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./87/binderfs") = 0 [pid 6283] <... chdir resumed>) = 0 [pid 6281] <... chdir resumed>) = 0 [pid 5830] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6284] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6283] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6281] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6280] <... sync resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 6281] <... openat resumed>) = 4 [pid 6280] exit_group(0) = ? [ 91.340254][ T6284] loop0: detected capacity change from 0 to 1024 [pid 5830] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] <... openat resumed>) = 4 [pid 6283] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6281] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6280] +++ exited with 0 +++ [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6280, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] newfstatat(AT_FDCWD, "./87/file1", [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./87/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6284] <... mount resumed>) = 0 [pid 6283] <... creat resumed>) = 5 [pid 5830] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6284] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5830] <... openat resumed>) = 4 [pid 6284] chdir("./file1" [pid 6281] <... creat resumed>) = 5 [pid 5830] newfstatat(4, "", [pid 6284] <... chdir resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6283] sync( [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6281] sync( [pid 5831] <... restart_syscall resumed>) = 0 [pid 6284] chdir("./file0" [pid 5830] getdents64(4, [pid 5831] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] getdents64(4, [pid 5831] newfstatat(3, "", [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6284] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6284] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] getdents64(3, [pid 5830] close(4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 6284] <... openat resumed>) = 4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] rmdir("./87/file1" [pid 5831] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5830] <... rmdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./88/binderfs" [pid 5830] getdents64(3, [pid 5831] <... unlink resumed>) = 0 [pid 6284] <... creat resumed>) = 5 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6284] sync( [pid 5831] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] close(3 [pid 6283] <... sync resumed>) = 0 [pid 6281] <... sync resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./87" [pid 6283] exit_group(0 [pid 6281] exit_group(0 [pid 5831] <... umount2 resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] mkdir("./88", 0777 [pid 6283] <... exit_group resumed>) = ? [pid 6281] <... exit_group resumed>) = ? [pid 6283] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 5831] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... mkdir resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./88/file1", [pid 5832] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5831] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(3, "", [pid 5832] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5833] getdents64(3, [pid 5831] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... ioctl resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5830] close(3 [pid 6284] <... sync resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(4, "", [pid 5830] <... close resumed>) = 0 [pid 6284] exit_group(0 [pid 5832] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6284] <... exit_group resumed>) = ? [pid 5831] getdents64(4, [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./90/binderfs" [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... unlink resumed>) = 0 [pid 5833] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] unlink("./88/binderfs") = 0 ./strace-static-x86_64: Process 6285 attached [pid 5833] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6285] set_robust_list(0x555557df1660, 24 [pid 5831] <... close resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6285 [pid 6285] <... set_robust_list resumed>) = 0 [pid 5831] rmdir("./88/file1" [pid 6285] chdir("./88") = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6285] setpgid(0, 0) = 0 [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] <... umount2 resumed>) = 0 [pid 5831] getdents64(3, [pid 6285] write(3, "1000", 4executing program [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3 [pid 6285] <... write resumed>) = 4 [pid 6285] close(3) = 0 [pid 6285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6285] write(1, "executing program\n", 18) = 18 [pid 6285] memfd_create("syzkaller", 0) = 3 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6284] +++ exited with 0 +++ [pid 5833] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] rmdir("./88" [pid 5833] newfstatat(AT_FDCWD, "./88/file1", [pid 5832] newfstatat(AT_FDCWD, "./90/file1", [pid 5831] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5833] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(4, "", [pid 5831] mkdir("./89", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] getdents64(4, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5833] close(4) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5833] rmdir("./88/file1" [pid 5832] rmdir("./90/file1" [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5829] <... restart_syscall resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] close(3 [pid 5833] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5831] <... close resumed>) = 0 [pid 5833] close(3 [pid 5832] <... close resumed>) = 0 [pid 5829] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6285] <... write resumed>) = 524288 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = 0 [pid 5832] rmdir("./90" [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] rmdir("./88" [pid 6285] munmap(0x7fd6d9800000, 138412032 [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6286 attached [pid 5833] <... rmdir resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5833] mkdir("./89", 0777 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6286 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6285] <... munmap resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] mkdir("./91", 0777 [pid 5829] getdents64(3, [pid 6286] set_robust_list(0x555557df1660, 24 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6286] <... set_robust_list resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... mkdir resumed>) = 0 [pid 5829] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6286] chdir("./89" [pid 6285] <... openat resumed>) = 4 [pid 6286] <... chdir resumed>) = 0 [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... prctl resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5832] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6286] setpgid(0, 0) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4) = 4 [pid 6286] close(3) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6286] write(1, "executing program\n", 18) = 18 [pid 6286] memfd_create("syzkaller", 0) = 3 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6285] <... ioctl resumed>) = 0 [pid 5833] <... ioctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5829] unlink("./88/binderfs" [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] close(3 [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(3 [pid 5829] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5829] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6285] close(3) = 0 [pid 6285] close(4) = 0 [pid 6285] mkdir("./file1", 0777) = 0 [pid 5832] <... close resumed>) = 0 [pid 6286] <... write resumed>) = 524288 [pid 6285] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6286] munmap(0x7fd6d9800000, 138412032 [pid 6285] <... mount resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... umount2 resumed>) = 0 [pid 6285] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6285] chdir("./file1"./strace-static-x86_64: Process 6288 attached ./strace-static-x86_64: Process 6287 attached ) = 0 [pid 5829] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6288] set_robust_list(0x555557df1660, 24 [pid 6286] <... munmap resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6287] set_robust_list(0x555557df1660, 24 [pid 6285] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] <... set_robust_list resumed>) = 0 [pid 6285] chdir("./file0" [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6288 [pid 5829] newfstatat(AT_FDCWD, "./88/file1", [pid 6287] chdir("./91" [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6287] <... chdir resumed>) = 0 [pid 5829] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] setpgid(0, 0 [pid 5829] <... openat resumed>) = 4 [pid 6288] <... set_robust_list resumed>) = 0 [pid 6286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6287 [pid 6288] chdir("./89" [pid 6287] <... setpgid resumed>) = 0 [pid 6286] <... openat resumed>) = 4 [pid 6285] <... chdir resumed>) = 0 [pid 5829] newfstatat(4, "", [pid 6288] <... chdir resumed>) = 0 [ 91.516903][ T6285] loop1: detected capacity change from 0 to 1024 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6286] ioctl(4, LOOP_SET_FD, 3 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6285] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5829] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6287] write(3, "1000", 4 [pid 5829] close(4 [pid 6287] <... write resumed>) = 4 [pid 5829] <... close resumed>) = 0 [pid 6287] close(3 [pid 6285] <... openat resumed>) = 4 [pid 5829] rmdir("./88/file1" [pid 6287] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6285] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000executing program [pid 6288] <... prctl resumed>) = 0 [pid 6287] write(1, "executing program\n", 18 [pid 5829] getdents64(3, [pid 6287] <... write resumed>) = 18 [pid 6287] memfd_create("syzkaller", 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6287] <... memfd_create resumed>) = 3 [pid 5829] close(3 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] setpgid(0, 0 [pid 6287] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... close resumed>) = 0 [pid 6288] <... setpgid resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6285] <... creat resumed>) = 5 [pid 5829] rmdir("./88" [pid 6288] <... openat resumed>) = 3 [pid 6288] write(3, "1000", 4 [pid 6286] <... ioctl resumed>) = 0 [pid 6288] <... write resumed>) = 4 [pid 6286] close(3 [pid 6288] close(3 [pid 6286] <... close resumed>) = 0 [pid 6288] <... close resumed>) = 0 [pid 6286] close(4) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 6286] mkdir("./file1", 0777executing program ) = 0 [pid 6288] <... symlink resumed>) = 0 [pid 6288] write(1, "executing program\n", 18) = 18 [pid 5829] mkdir("./89", 0777 [pid 6288] memfd_create("syzkaller", 0 [pid 6286] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5829] <... mkdir resumed>) = 0 [pid 6285] sync( [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = 0 [pid 5829] close(3 [pid 6288] <... memfd_create resumed>) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5829] <... close resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x555557df1660, 24 [pid 6287] <... write resumed>) = 524288 [pid 6289] <... set_robust_list resumed>) = 0 [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6286] <... mount resumed>) = 0 [pid 6285] <... sync resumed>) = 0 [ 91.580849][ T6286] loop2: detected capacity change from 0 to 1024 [pid 6289] chdir("./89" [pid 6288] <... write resumed>) = 524288 [pid 6287] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6289 [pid 6289] <... chdir resumed>) = 0 [pid 6286] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... munmap resumed>) = 0 [pid 6286] <... openat resumed>) = 3 [pid 6285] exit_group(0 [pid 6289] <... prctl resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6285] <... exit_group resumed>) = ? [pid 6289] setpgid(0, 0 [pid 6287] <... openat resumed>) = 4 [pid 6286] chdir("./file1" [pid 6285] +++ exited with 0 +++ [pid 6289] <... setpgid resumed>) = 0 [pid 6287] ioctl(4, LOOP_SET_FD, 3 [pid 6286] <... chdir resumed>) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6286] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... restart_syscall resumed>) = 0 [pid 6289] <... openat resumed>) = 3 [pid 6286] chdir("./file0" [pid 6289] write(3, "1000", 4 [pid 5830] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6289] <... write resumed>) = 4 [pid 6288] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6289] close(3 [pid 6288] <... munmap resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6289] <... close resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 6289] symlink("/dev/binderfs", "./binderfs" [pid 6288] <... openat resumed>) = 4 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6289] <... symlink resumed>) = 0 [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 5830] getdents64(3, [pid 6289] write(1, "executing program\n", 18 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6289] <... write resumed>) = 18 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6289] memfd_create("syzkaller", 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6286] <... chdir resumed>) = 0 [pid 6289] <... memfd_create resumed>) = 3 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6286] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] unlink("./88/binderfs" [pid 6289] <... mmap resumed>) = 0x7fd6d9800000 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6287] <... ioctl resumed>) = 0 [pid 6286] <... openat resumed>) = 4 [pid 5830] <... unlink resumed>) = 0 [pid 5830] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6287] close(3) = 0 [pid 6287] close(4) = 0 [pid 6287] mkdir("./file1", 0777) = 0 [pid 6288] <... ioctl resumed>) = 0 [pid 6287] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... umount2 resumed>) = 0 [pid 6288] close(3 [pid 6286] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6288] <... close resumed>) = 0 [pid 6288] close(4) = 0 [pid 6287] <... mount resumed>) = 0 [pid 6288] mkdir("./file1", 0777 [pid 6287] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6288] <... mkdir resumed>) = 0 [pid 6287] <... openat resumed>) = 3 [pid 5830] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6287] chdir("./file1" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6288] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6287] <... chdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./88/file1", [pid 6289] <... write resumed>) = 524288 [pid 6287] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6286] <... creat resumed>) = 5 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./88/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6286] sync( [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... openat resumed>) = 4 [pid 6287] chdir("./file0" [ 91.648827][ T6287] loop3: detected capacity change from 0 to 1024 [ 91.663695][ T6288] loop4: detected capacity change from 0 to 1024 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6287] <... chdir resumed>) = 0 [pid 6287] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 5830] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5830] close(4 [pid 6287] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./88/file1") = 0 [pid 6288] <... mount resumed>) = 0 [pid 5830] getdents64(3, [pid 6288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6289] munmap(0x7fd6d9800000, 138412032 [pid 6288] <... openat resumed>) = 3 [pid 6289] <... munmap resumed>) = 0 [pid 6288] chdir("./file1" [pid 6287] <... creat resumed>) = 5 [pid 6288] <... chdir resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] close(3 [pid 6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5830] <... close resumed>) = 0 [pid 6289] <... openat resumed>) = 4 [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 6288] chdir("./file0" [pid 6287] sync( [pid 5830] rmdir("./88") = 0 [pid 5830] mkdir("./89", 0777 [pid 6289] <... ioctl resumed>) = 0 [pid 6288] <... chdir resumed>) = 0 [pid 6286] <... sync resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 6288] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6289] close(3) = 0 [pid 6288] <... openat resumed>) = 4 [pid 6289] close(4 [pid 6286] exit_group(0 [pid 6289] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6289] mkdir("./file1", 0777 [pid 6288] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6286] <... exit_group resumed>) = ? [pid 5830] <... openat resumed>) = 3 [pid 6287] <... sync resumed>) = 0 [pid 6289] <... mkdir resumed>) = 0 [pid 6286] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6289] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... ioctl resumed>) = 0 [pid 5830] close(3 [pid 6288] <... creat resumed>) = 5 [pid 6287] exit_group(0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6287] <... exit_group resumed>) = ? [pid 6288] sync( [pid 6287] +++ exited with 0 +++ [pid 5831] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... close resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6290 attached [pid 5831] getdents64(3, [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6290 [pid 6290] set_robust_list(0x555557df1660, 24) = 0 [pid 6290] chdir("./89" [pid 5832] <... restart_syscall resumed>) = 0 [pid 6290] <... chdir resumed>) = 0 [pid 6289] <... mount resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6289] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6290] <... prctl resumed>) = 0 [pid 6289] <... openat resumed>) = 3 [pid 6290] setpgid(0, 0 [pid 6289] chdir("./file1" [pid 5831] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6290] <... setpgid resumed>) = 0 [pid 6289] <... chdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6290] <... openat resumed>) = 3 [pid 6289] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5832] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6290] write(3, "1000", 4 [pid 6289] chdir("./file0" [ 91.725818][ T6289] loop0: detected capacity change from 0 to 1024 [pid 5832] newfstatat(3, "", [pid 5831] unlink("./89/binderfs" [pid 6290] <... write resumed>) = 4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6290] close(3 [pid 6289] <... chdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6290] <... close resumed>) = 0 [pid 5832] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6290] symlink("/dev/binderfs", "./binderfs" [pid 6289] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6288] <... sync resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6290] <... symlink resumed>) = 0 [pid 5832] unlink("./91/binderfs"executing program [pid 6290] write(1, "executing program\n", 18 [pid 6288] exit_group(0 [pid 5832] <... unlink resumed>) = 0 [pid 6290] <... write resumed>) = 18 [pid 6289] <... openat resumed>) = 4 [pid 6288] <... exit_group resumed>) = ? [pid 6290] memfd_create("syzkaller", 0 [pid 6289] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6288] +++ exited with 0 +++ [pid 5832] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./89/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6290] <... memfd_create resumed>) = 3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5831] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 5833] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", [pid 5833] <... openat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(3, "", [pid 5832] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 6289] <... creat resumed>) = 5 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(3, [pid 5832] newfstatat(AT_FDCWD, "./91/file1", [pid 6289] sync( [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(4, [pid 5833] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(4 [pid 5833] unlink("./89/binderfs" [pid 5832] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... close resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] rmdir("./89/file1") = 0 [pid 5833] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5831] getdents64(3, [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] close(3) = 0 [pid 5832] rmdir("./91/file1" [pid 5831] rmdir("./89" [pid 5833] <... umount2 resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5833] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5831] mkdir("./90", 0777 [pid 6290] <... write resumed>) = 524288 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(3, [pid 5831] <... mkdir resumed>) = 0 [pid 6290] munmap(0x7fd6d9800000, 138412032 [pid 5833] newfstatat(AT_FDCWD, "./89/file1", [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] close(3 [pid 5833] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... close resumed>) = 0 [pid 6290] <... munmap resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] rmdir("./91" [pid 6290] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] newfstatat(4, "", [pid 5832] <... rmdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] mkdir("./92", 0777 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6290] <... openat resumed>) = 4 [pid 6289] <... sync resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] <... mkdir resumed>) = 0 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6289] exit_group(0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... openat resumed>) = 3 [pid 5833] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] close(3 [pid 5832] <... ioctl resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] close(3 [pid 6289] <... exit_group resumed>) = ? [pid 5833] close(4 [pid 5832] <... close resumed>) = 0 [pid 6289] +++ exited with 0 +++ [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./89/file1" [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5833] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6291 attached [pid 6290] <... ioctl resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6291 [pid 6291] set_robust_list(0x555557df1660, 24 [pid 6290] close(3 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6292 attached [pid 6291] <... set_robust_list resumed>) = 0 [pid 6290] <... close resumed>) = 0 [pid 5833] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6291] chdir("./90" [pid 6290] close(4 [pid 5833] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] set_robust_list(0x555557df1660, 24 [pid 6291] <... chdir resumed>) = 0 [pid 6290] <... close resumed>) = 0 [pid 5833] rmdir("./89" [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6292 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6290] mkdir("./file1", 0777 [pid 5829] <... openat resumed>) = 3 [pid 6292] chdir("./92" [pid 6291] <... prctl resumed>) = 0 [pid 6290] <... mkdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 6292] <... chdir resumed>) = 0 [pid 6291] setpgid(0, 0 [pid 5833] mkdir("./90", 0777 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6291] <... setpgid resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6292] <... prctl resumed>) = 0 [pid 6290] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6292] setpgid(0, 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] getdents64(3, [pid 6292] <... setpgid resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6291] <... openat resumed>) = 3 [pid 6290] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6292] <... openat resumed>) = 3 [pid 6291] write(3, "1000", 4 [pid 5833] <... openat resumed>) = 3 [pid 6292] write(3, "1000", 4 [pid 6291] <... write resumed>) = 4 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5829] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] <... write resumed>) = 4 [pid 6291] close(3 [pid 5833] <... ioctl resumed>) = 0 [pid 6292] close(3 [pid 6291] <... close resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] close(3 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] <... openat resumed>) = 3 [pid 6290] chdir("./file1") = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6290] chdir("./file0") = 0 [ 91.837089][ T6290] loop1: detected capacity change from 0 to 1024 [pid 6290] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6292] <... close resumed>) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... close resumed>) = 0 [pid 5829] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6292] symlink("/dev/binderfs", "./binderfs" [pid 6291] <... symlink resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program executing program [pid 6292] <... symlink resumed>) = 0 [pid 6291] write(1, "executing program\n", 18 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] unlink("./89/binderfs" [pid 6292] write(1, "executing program\n", 18 [pid 6291] <... write resumed>) = 18 [pid 6292] <... write resumed>) = 18 [pid 6291] memfd_create("syzkaller", 0 [pid 6290] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... unlink resumed>) = 0 [pid 6291] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6293 attached [pid 6292] memfd_create("syzkaller", 0 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] <... mmap resumed>) = 0x7fd6d9800000 [pid 6290] <... creat resumed>) = 5 [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6292] <... memfd_create resumed>) = 3 [pid 6290] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6293 [pid 6293] set_robust_list(0x555557df1660, 24 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6293] <... set_robust_list resumed>) = 0 [pid 6293] chdir("./90") = 0 [pid 6292] <... mmap resumed>) = 0x7fd6d9800000 [pid 5829] <... umount2 resumed>) = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6293] write(3, "1000", 4 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] <... write resumed>) = 4 [pid 6293] close(3 [pid 5829] newfstatat(AT_FDCWD, "./89/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6293] <... close resumed>) = 0 [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6290] <... sync resumed>) = 0 [pid 5829] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 6290] exit_group(0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] <... exit_group resumed>) = ? [pid 6290] +++ exited with 0 +++ [pid 6293] <... symlink resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] write(1, "executing program\n", 18 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6290, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6293] <... write resumed>) = 18 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... openat resumed>) = 4 [pid 6293] memfd_create("syzkaller", 0 [pid 6291] <... write resumed>) = 524288 [pid 5829] newfstatat(4, "", [pid 6291] munmap(0x7fd6d9800000, 138412032 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6293] <... memfd_create resumed>) = 3 [pid 6291] <... munmap resumed>) = 0 [pid 5829] getdents64(4, [pid 6291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6292] <... write resumed>) = 524288 [pid 6291] <... openat resumed>) = 4 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6293] <... mmap resumed>) = 0x7fd6d9800000 [pid 6292] munmap(0x7fd6d9800000, 138412032 [pid 5829] getdents64(4, [pid 6291] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6292] <... munmap resumed>) = 0 [pid 5829] close(4) = 0 [pid 6291] <... ioctl resumed>) = 0 [pid 5830] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] close(3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6291] <... close resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6291] close(4) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6291] mkdir("./file1", 0777 [pid 5830] newfstatat(3, "", [pid 5829] rmdir("./89/file1" [pid 6291] <... mkdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6291] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] getdents64(3, [pid 5829] getdents64(3, [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6292] <... openat resumed>) = 4 [pid 5830] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 5829] close(3 [pid 6293] <... write resumed>) = 524288 [pid 6292] <... ioctl resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 6292] close(3 [pid 5829] rmdir("./89" [pid 6292] <... close resumed>) = 0 [pid 5829] <... rmdir resumed>) = 0 [pid 6292] close(4 [pid 5830] newfstatat(AT_FDCWD, "./89/binderfs", [pid 5829] mkdir("./90", 0777 [pid 6292] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... mkdir resumed>) = 0 [pid 6292] mkdir("./file1", 0777) = 0 [pid 5830] unlink("./89/binderfs" [pid 6293] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... unlink resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6293] <... munmap resumed>) = 0 [pid 6292] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] <... mount resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6293] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6291] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5829] <... ioctl resumed>) = 0 [pid 6291] <... openat resumed>) = 3 [pid 5829] close(3 [pid 6293] <... openat resumed>) = 4 [pid 6291] chdir("./file1" [pid 6293] ioctl(4, LOOP_SET_FD, 3 [pid 6291] <... chdir resumed>) = 0 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... close resumed>) = 0 [ 91.962318][ T6291] loop2: detected capacity change from 0 to 1024 [ 91.975273][ T6292] loop3: detected capacity change from 0 to 1024 [pid 6291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6294 attached [pid 6294] set_robust_list(0x555557df1660, 24 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6294 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6294] chdir("./90") = 0 [pid 6291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6294] <... prctl resumed>) = 0 [pid 6291] chdir("./file0" [pid 6294] setpgid(0, 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] <... setpgid resumed>) = 0 [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] <... ioctl resumed>) = 0 [pid 6292] <... mount resumed>) = 0 [pid 6291] <... chdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./89/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./89/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6294] <... openat resumed>) = 3 [pid 6292] <... openat resumed>) = 3 [pid 6291] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... openat resumed>) = 4 [pid 6293] close(3 [pid 6292] chdir("./file1" [pid 5830] newfstatat(4, "", [pid 6294] write(3, "1000", 4 [pid 6293] <... close resumed>) = 0 [pid 6292] <... chdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6294] <... write resumed>) = 4 [pid 6293] close(4 [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6291] <... openat resumed>) = 4 [pid 6294] close(3 [pid 6293] <... close resumed>) = 0 [pid 6292] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] <... close resumed>) = 0 [pid 6293] mkdir("./file1", 0777 [pid 6292] chdir("./file0" [pid 6291] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6294] symlink("/dev/binderfs", "./binderfs" [pid 6293] <... mkdir resumed>) = 0 [pid 6294] <... symlink resumed>) = 0 [pid 6292] <... chdir resumed>) = 0 [pid 5830] getdents64(4, [pid 6292] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6294] write(1, "executing program\n", 18executing program [pid 5830] getdents64(4, [pid 6294] <... write resumed>) = 18 [pid 6293] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6294] memfd_create("syzkaller", 0 [pid 6292] <... openat resumed>) = 4 [pid 6291] <... creat resumed>) = 5 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6294] <... memfd_create resumed>) = 3 [pid 5830] close(4 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6292] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... close resumed>) = 0 [pid 6291] sync( [pid 5830] rmdir("./89/file1") = 0 [pid 6292] <... creat resumed>) = 5 [pid 5830] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [ 92.008232][ T6293] loop4: detected capacity change from 0 to 1024 [pid 6292] sync( [pid 5830] close(3) = 0 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6293] <... mount resumed>) = 0 [pid 5830] rmdir("./89" [pid 6293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6293] chdir("./file1" [pid 5830] <... rmdir resumed>) = 0 [pid 6293] <... chdir resumed>) = 0 [pid 5830] mkdir("./90", 0777 [pid 6293] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] <... mkdir resumed>) = 0 [pid 6293] chdir("./file0" [pid 6294] <... write resumed>) = 524288 [pid 6293] <... chdir resumed>) = 0 [pid 6292] <... sync resumed>) = 0 [pid 6291] <... sync resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6294] munmap(0x7fd6d9800000, 138412032 [pid 6292] exit_group(0 [pid 6291] exit_group(0 [pid 6294] <... munmap resumed>) = 0 [pid 6293] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6292] <... exit_group resumed>) = ? [pid 5830] <... openat resumed>) = 3 [pid 6291] <... exit_group resumed>) = ? [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 6292] +++ exited with 0 +++ [pid 5830] close(3 [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6291] +++ exited with 0 +++ [pid 6293] <... openat resumed>) = 4 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] <... close resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6293] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6294] <... openat resumed>) = 4 [pid 6293] <... creat resumed>) = 5 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6294] ioctl(4, LOOP_SET_FD, 3 [pid 6293] sync( [pid 5832] umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6295 attached [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 5831] newfstatat(3, "", [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6295 [pid 6295] set_robust_list(0x555557df1660, 24 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6295] <... set_robust_list resumed>) = 0 [pid 6295] chdir("./90" [pid 5831] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6295] <... chdir resumed>) = 0 [pid 6294] <... ioctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] getdents64(3, [pid 5831] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6295] <... prctl resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6295] setpgid(0, 0) = 0 [pid 5832] umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./90/binderfs" [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6295] <... openat resumed>) = 3 [pid 6294] close(3 [pid 6293] <... sync resumed>) = 0 [pid 5832] unlink("./92/binderfs" [pid 5831] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6295] write(3, "1000", 4 [pid 6294] <... close resumed>) = 0 [pid 6293] exit_group(0 [pid 5832] <... unlink resumed>) = 0 [pid 6295] <... write resumed>) = 4 [pid 6294] close(4 [pid 6293] <... exit_group resumed>) = ? [pid 6295] close(3 [pid 6294] <... close resumed>) = 0 [pid 6293] +++ exited with 0 +++ [pid 5832] umount2("./92/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 6294] mkdir("./file1", 0777 [pid 6295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> executing program [pid 6295] write(1, "executing program\n", 18 [pid 6294] <... mkdir resumed>) = 0 [pid 6295] <... write resumed>) = 18 [pid 6295] memfd_create("syzkaller", 0) = 3 [pid 6294] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6294] <... mount resumed>) = 0 [pid 5832] umount2("./92/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6294] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./92/file1", [pid 5833] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6294] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./92/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6295] <... mmap resumed>) = 0x7fd6d9800000 [ 92.123861][ T6294] loop0: detected capacity change from 0 to 1024 [pid 6294] chdir("./file1" [pid 5833] newfstatat(3, "", [pid 5831] newfstatat(AT_FDCWD, "./90/file1", [pid 6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6294] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] getdents64(3, [pid 5832] openat(AT_FDCWD, "./92/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6294] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... openat resumed>) = 4 [pid 5831] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6294] chdir("./file0" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(4, "", [pid 5831] <... openat resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(4, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5832] getdents64(4, 0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] close(4 [pid 5831] getdents64(4, [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5833] unlink("./90/binderfs" [pid 5831] close(4 [pid 6295] <... write resumed>) = 524288 [pid 5831] <... close resumed>) = 0 [pid 6295] munmap(0x7fd6d9800000, 138412032 [pid 6294] <... chdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] rmdir("./92/file1" [pid 5831] rmdir("./90/file1" [pid 5833] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, [pid 6294] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./90") = 0 [pid 5831] mkdir("./91", 0777 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6295] <... munmap resumed>) = 0 [pid 6294] <... openat resumed>) = 4 [pid 5832] getdents64(3, [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6295] <... openat resumed>) = 4 [pid 6294] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] newfstatat(AT_FDCWD, "./90/file1", [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 6295] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6294] <... creat resumed>) = 5 [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3 [pid 6294] sync( [pid 5833] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] rmdir("./92" [pid 5831] <... close resumed>) = 0 [pid 6295] <... ioctl resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] close(3 [pid 5832] mkdir("./93", 0777 [pid 6295] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] close(4 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... mkdir resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6296 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6295] mkdir("./file1", 0777 [pid 5833] getdents64(4, [pid 6295] <... mkdir resumed>) = 0 [pid 6295] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6296 attached [pid 5833] getdents64(4, [pid 6296] set_robust_list(0x555557df1660, 24 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] close(4 [pid 5832] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6296] <... set_robust_list resumed>) = 0 [pid 5833] rmdir("./90/file1" [pid 5832] <... ioctl resumed>) = 0 [pid 6296] chdir("./91" [pid 5833] <... rmdir resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 6295] <... mount resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] close(3 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6295] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6296] <... prctl resumed>) = 0 [pid 5833] close(3 [pid 6295] <... openat resumed>) = 3 [pid 6296] setpgid(0, 0 [pid 6294] <... sync resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6295] chdir("./file1" [pid 6296] <... setpgid resumed>) = 0 [pid 5833] rmdir("./90" [pid 6294] exit_group(0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6294] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6297 attached [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] <... chdir resumed>) = 0 [pid 6294] +++ exited with 0 +++ [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6297 [pid 6297] set_robust_list(0x555557df1660, 24 [pid 6295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6296] <... openat resumed>) = 3 [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6295] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6297] <... set_robust_list resumed>) = 0 [pid 6295] chdir("./file0" [pid 6296] write(3, "1000", 4 [pid 5833] mkdir("./91", 0777 [pid 6297] chdir("./93" [pid 6296] <... write resumed>) = 4 [pid 5833] <... mkdir resumed>) = 0 [pid 6296] close(3 [pid 6295] <... chdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6296] <... close resumed>) = 0 [pid 6295] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... openat resumed>) = 3 [pid 6296] symlink("/dev/binderfs", "./binderfs"executing program [pid 6297] <... chdir resumed>) = 0 [pid 6296] <... symlink resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6296] write(1, "executing program\n", 18 [pid 6295] <... openat resumed>) = 4 [pid 5833] <... ioctl resumed>) = 0 [pid 6297] <... prctl resumed>) = 0 [pid 6296] <... write resumed>) = 18 [pid 5833] close(3 [ 92.214658][ T6295] loop1: detected capacity change from 0 to 1024 [pid 6297] setpgid(0, 0) = 0 [pid 6296] memfd_create("syzkaller", 0) = 3 [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6295] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6298 attached [pid 6297] <... openat resumed>) = 3 [pid 6296] <... mmap resumed>) = 0x7fd6d9800000 [pid 6295] <... creat resumed>) = 5 [pid 5829] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] set_robust_list(0x555557df1660, 24 [pid 5829] <... openat resumed>) = 3 [pid 6298] <... set_robust_list resumed>) = 0 [pid 6297] write(3, "1000", 4 [pid 6295] sync( [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6298 [pid 5829] newfstatat(3, "", [pid 6297] <... write resumed>) = 4 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6297] close(3) = 0 [pid 5829] getdents64(3, [pid 6297] symlink("/dev/binderfs", "./binderfs" [pid 6298] chdir("./91" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 6298] <... chdir resumed>) = 0 [pid 6297] <... symlink resumed>) = 0 [pid 5829] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6297] write(1, "executing program\n", 18 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6298] <... prctl resumed>) = 0 [pid 6297] <... write resumed>) = 18 [pid 5829] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6298] setpgid(0, 0) = 0 [pid 6297] memfd_create("syzkaller", 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] unlink("./90/binderfs" [pid 6298] <... openat resumed>) = 3 [pid 6297] <... memfd_create resumed>) = 3 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6298] write(3, "1000", 4 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5829] <... unlink resumed>) = 0 [pid 6298] <... write resumed>) = 4 [pid 6297] <... mmap resumed>) = 0x7fd6d9800000 [pid 6298] close(3 [pid 5829] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6298] <... close resumed>) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] write(1, "executing program\n", 18executing program [pid 6296] <... write resumed>) = 524288 [pid 6295] <... sync resumed>) = 0 [pid 6298] <... write resumed>) = 18 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5829] <... umount2 resumed>) = 0 [pid 6298] memfd_create("syzkaller", 0 [pid 5829] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6298] <... memfd_create resumed>) = 3 [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6295] exit_group(0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] <... mmap resumed>) = 0x7fd6d9800000 [pid 6295] <... exit_group resumed>) = ? [pid 5829] newfstatat(AT_FDCWD, "./90/file1", [pid 6296] munmap(0x7fd6d9800000, 138412032 [pid 6295] +++ exited with 0 +++ [pid 6296] <... munmap resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5829] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6296] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6297] <... write resumed>) = 524288 [pid 5829] <... openat resumed>) = 4 [pid 5830] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] getdents64(4, [pid 5830] newfstatat(3, "", [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 5829] getdents64(4, [pid 6297] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6297] <... munmap resumed>) = 0 [pid 5830] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] close(4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6297] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] rmdir("./90/file1" [pid 6296] <... ioctl resumed>) = 0 [pid 6296] close(3 [pid 5829] <... rmdir resumed>) = 0 [pid 5830] unlink("./90/binderfs" [pid 6296] <... close resumed>) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5829] getdents64(3, [pid 5830] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6296] close(4) = 0 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6296] mkdir("./file1", 0777) = 0 [pid 5829] close(3 [pid 6298] <... write resumed>) = 524288 [pid 6296] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5830] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] rmdir("./90" [pid 6298] munmap(0x7fd6d9800000, 138412032 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... rmdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./90/file1", [pid 5829] mkdir("./91", 0777 [pid 6298] <... munmap resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6298] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6297] <... ioctl resumed>) = 0 [pid 6296] <... mount resumed>) = 0 [pid 5830] umount2("./90/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... mkdir resumed>) = 0 [pid 6298] <... openat resumed>) = 4 [pid 6297] close(3 [pid 6296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] ioctl(4, LOOP_SET_FD, 3 [pid 6297] <... close resumed>) = 0 [pid 6296] <... openat resumed>) = 3 [pid 5830] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6296] chdir("./file1") = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] <... openat resumed>) = 3 [pid 6296] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6297] close(4 [pid 6296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6297] <... close resumed>) = 0 [pid 6296] chdir("./file0" [pid 6297] mkdir("./file1", 0777 [pid 6296] <... chdir resumed>) = 0 [pid 6297] <... mkdir resumed>) = 0 [pid 6296] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6297] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6296] <... openat resumed>) = 4 [pid 6296] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] newfstatat(4, "", [pid 6298] <... ioctl resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6298] close(3 [pid 6297] <... mount resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5829] <... ioctl resumed>) = 0 [pid 6298] close(4 [pid 6296] <... creat resumed>) = 5 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] close(3 [pid 6298] <... close resumed>) = 0 [pid 6297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6296] sync( [pid 5830] getdents64(4, [pid 5829] <... close resumed>) = 0 [pid 6298] mkdir("./file1", 0777 [pid 6297] <... openat resumed>) = 3 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6299 attached [pid 6298] <... mkdir resumed>) = 0 [pid 6297] chdir("./file1" [pid 5830] close(4 [pid 6298] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6297] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./90/file1") = 0 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6299 [pid 6299] set_robust_list(0x555557df1660, 24 [pid 6298] <... mount resumed>) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] getdents64(3, [pid 6299] <... set_robust_list resumed>) = 0 [pid 6298] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6299] chdir("./91" [pid 6298] <... openat resumed>) = 3 [pid 6297] chdir("./file0" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 6298] chdir("./file1" [pid 5830] close(3 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6298] <... chdir resumed>) = 0 [pid 6296] <... sync resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6299] setpgid(0, 0 [pid 6298] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6297] <... chdir resumed>) = 0 [pid 6296] exit_group(0 [pid 5830] rmdir("./90" [pid 6299] <... setpgid resumed>) = 0 [pid 6298] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 92.330346][ T6296] loop2: detected capacity change from 0 to 1024 [ 92.342184][ T6297] loop3: detected capacity change from 0 to 1024 [ 92.369694][ T6298] loop4: detected capacity change from 0 to 1024 [pid 6297] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6298] chdir("./file0" [pid 6296] <... exit_group resumed>) = ? [pid 5830] <... rmdir resumed>) = 0 [pid 6299] <... openat resumed>) = 3 [pid 6297] <... openat resumed>) = 4 [pid 6296] +++ exited with 0 +++ [pid 5830] mkdir("./91", 0777) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6297] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6299] write(3, "1000", 4 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6298] <... chdir resumed>) = 0 [pid 6299] <... write resumed>) = 4 [pid 6298] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6299] close(3 [pid 6297] <... creat resumed>) = 5 [pid 6299] <... close resumed>) = 0 [pid 6297] sync( [pid 6299] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... openat resumed>) = 3 [pid 6298] <... openat resumed>) = 4 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 6299] <... symlink resumed>) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 6298] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000executing program [pid 5830] close(3 [pid 6299] write(1, "executing program\n", 18) = 18 [pid 6299] memfd_create("syzkaller", 0) = 3 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6298] <... creat resumed>) = 5 [pid 6299] <... mmap resumed>) = 0x7fd6d9800000 ./strace-static-x86_64: Process 6300 attached [pid 6300] set_robust_list(0x555557df1660, 24) = 0 [pid 6300] chdir("./91" [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6297] <... sync resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6300 [pid 6298] sync( [pid 6297] exit_group(0 [pid 6300] <... chdir resumed>) = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6297] <... exit_group resumed>) = ? [pid 6300] <... prctl resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] setpgid(0, 0) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6297] +++ exited with 0 +++ [pid 6300] <... openat resumed>) = 3 [pid 6298] <... sync resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] exit_group(0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5831] <... openat resumed>) = 3 [pid 5832] umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(3, [pid 6300] write(3, "1000", 4 [pid 5832] <... openat resumed>) = 3 [pid 6300] <... write resumed>) = 4 [pid 5832] newfstatat(3, "", [pid 5831] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] <... exit_group resumed>) = ? [pid 5831] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(3, [pid 6300] close(3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5831] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 5832] umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] <... symlink resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6300] write(1, "executing program\n", 18 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./91/binderfs" [pid 6300] <... write resumed>) = 18 [pid 5832] newfstatat(AT_FDCWD, "./93/binderfs", [pid 5831] <... unlink resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6298] +++ exited with 0 +++ [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6300] <... memfd_create resumed>) = 3 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6299] <... write resumed>) = 524288 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] unlink("./93/binderfs" [pid 6299] munmap(0x7fd6d9800000, 138412032 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6299] <... munmap resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] umount2("./93/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6299] <... openat resumed>) = 4 [pid 5833] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 5831] newfstatat(AT_FDCWD, "./91/file1", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./91/binderfs") = 0 [pid 5833] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6300] <... write resumed>) = 524288 [pid 6299] <... ioctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5832] <... umount2 resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6300] munmap(0x7fd6d9800000, 138412032 [pid 6299] close(3 [pid 5831] <... openat resumed>) = 4 [pid 6300] <... munmap resumed>) = 0 [pid 6299] <... close resumed>) = 0 [pid 5833] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(4, "", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./93/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6299] close(4 [pid 5833] newfstatat(AT_FDCWD, "./91/file1", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(4, [pid 6299] <... close resumed>) = 0 [pid 6299] mkdir("./file1", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] newfstatat(AT_FDCWD, "./93/file1", [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5833] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6300] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 92.487503][ T6299] loop0: detected capacity change from 0 to 1024 [pid 5831] close(4 [pid 5833] <... openat resumed>) = 4 [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6299] <... mkdir resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] umount2("./93/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./91/file1" [pid 6299] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5831] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, 0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] rmdir("./91" [pid 6300] <... ioctl resumed>) = 0 [pid 6299] <... mount resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] openat(AT_FDCWD, "./93/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5832] <... openat resumed>) = 4 [pid 5831] mkdir("./92", 0777 [pid 5833] getdents64(4, [pid 6299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] newfstatat(4, "", [pid 6300] close(3 [pid 6299] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6299] chdir("./file1" [pid 5833] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6300] close(4 [pid 6299] <... chdir resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6300] mkdir("./file1", 0777) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6300] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] rmdir("./91/file1" [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5831] <... openat resumed>) = 3 [pid 6299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 6299] chdir("./file0" [pid 5832] close(4 [pid 5831] close(3 [pid 6300] <... mount resumed>) = 0 [ 92.528972][ T6300] loop1: detected capacity change from 0 to 1024 [pid 6300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6299] <... chdir resumed>) = 0 [pid 5833] getdents64(3, [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] <... openat resumed>) = 3 [pid 6299] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 6300] chdir("./file1" [pid 5833] close(3 [pid 5832] rmdir("./93/file1" [pid 5833] <... close resumed>) = 0 ./strace-static-x86_64: Process 6301 attached [pid 6300] <... chdir resumed>) = 0 [pid 6299] <... openat resumed>) = 4 [pid 5833] rmdir("./91" [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 6300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(3, [pid 6300] chdir("./file0" [pid 5833] mkdir("./92", 0777 [pid 5832] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555557df1650) = 6301 [pid 6301] set_robust_list(0x555557df1660, 24 [pid 5832] <... close resumed>) = 0 [pid 6301] <... set_robust_list resumed>) = 0 [pid 5832] rmdir("./93" [pid 6301] chdir("./92" [pid 6300] <... chdir resumed>) = 0 [pid 6299] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... rmdir resumed>) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 6300] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5833] <... openat resumed>) = 3 [pid 5832] mkdir("./94", 0777 [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6301] setpgid(0, 0 [pid 6300] <... openat resumed>) = 4 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... mkdir resumed>) = 0 [pid 6301] <... setpgid resumed>) = 0 [pid 6300] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5833] <... ioctl resumed>) = 0 [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] close(3) = 0 [pid 6301] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = 0 [pid 5832] close(3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6301] write(3, "1000", 4 [pid 6300] <... creat resumed>) = 5 [pid 6299] <... creat resumed>) = 5 [pid 5832] <... close resumed>) = 0 ./strace-static-x86_64: Process 6302 attached [pid 6301] <... write resumed>) = 4 [pid 6300] sync( [pid 6299] sync( [pid 6302] set_robust_list(0x555557df1660, 24 [pid 6301] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6302] <... set_robust_list resumed>) = 0 [pid 6301] <... close resumed>) = 0 [pid 6302] chdir("./92" [pid 6301] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6303 attached [pid 5833] <... clone resumed>, child_tidptr=0x555557df1650) = 6302 [pid 6303] set_robust_list(0x555557df1660, 24 [pid 6302] <... chdir resumed>) = 0 [pid 6303] <... set_robust_list resumed>) = 0 [pid 6303] chdir("./94") = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555557df1650) = 6303 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6303] write(3, "1000", 4) = 4 [pid 6301] <... symlink resumed>) = 0 [pid 6302] <... prctl resumed>) = 0 [pid 6301] write(1, "executing program\n", 18executing program [pid 6303] close(3 [pid 6302] setpgid(0, 0 [pid 6301] <... write resumed>) = 18 [pid 6303] <... close resumed>) = 0 [pid 6302] <... setpgid resumed>) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs" [pid 6301] memfd_create("syzkaller", 0 [pid 6303] <... symlink resumed>) = 0 [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6301] <... memfd_create resumed>) = 3 executing program [pid 6303] write(1, "executing program\n", 18 [pid 6302] <... openat resumed>) = 3 [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6302] write(3, "1000", 4 [pid 6303] <... write resumed>) = 18 [pid 6302] <... write resumed>) = 4 [pid 6301] <... mmap resumed>) = 0x7fd6d9800000 [pid 6303] memfd_create("syzkaller", 0 [pid 6302] close(3 [pid 6303] <... memfd_create resumed>) = 3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6302] <... close resumed>) = 0 [pid 6300] <... sync resumed>) = 0 [pid 6302] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6299] <... sync resumed>) = 0 [pid 6302] write(1, "executing program\n", 18) = 18 [pid 6300] exit_group(0 [pid 6299] exit_group(0 [pid 6302] memfd_create("syzkaller", 0 [pid 6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6300] <... exit_group resumed>) = ? [pid 6299] <... exit_group resumed>) = ? [pid 6302] <... memfd_create resumed>) = 3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6300] +++ exited with 0 +++ [pid 6299] +++ exited with 0 +++ [pid 6302] <... mmap resumed>) = 0x7fd6d9800000 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... restart_syscall resumed>) = 0 [pid 5830] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", [pid 5829] <... restart_syscall resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6301] <... write resumed>) = 524288 [pid 5830] getdents64(3, [pid 5829] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6303] <... write resumed>) = 524288 [pid 6302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5829] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(3, "", [pid 5830] newfstatat(AT_FDCWD, "./91/binderfs", [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] getdents64(3, [pid 5830] unlink("./91/binderfs" [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 4 entries */, 32768) = 112 [pid 5830] <... unlink resumed>) = 0 [pid 5829] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] munmap(0x7fd6d9800000, 138412032 [pid 5829] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./91/binderfs" [pid 6301] <... munmap resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 6303] munmap(0x7fd6d9800000, 138412032 [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5829] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6303] <... munmap resumed>) = 0 [pid 6302] <... write resumed>) = 524288 [pid 6301] <... openat resumed>) = 4 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 6301] <... ioctl resumed>) = 0 [pid 6302] munmap(0x7fd6d9800000, 138412032 [pid 6303] <... ioctl resumed>) = 0 [pid 6302] <... munmap resumed>) = 0 [pid 6301] close(3 [pid 5830] <... umount2 resumed>) = 0 [pid 5829] <... umount2 resumed>) = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6303] close(3 [pid 6302] <... openat resumed>) = 4 [pid 6301] <... close resumed>) = 0 [pid 5830] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6303] <... close resumed>) = 0 [pid 6302] ioctl(4, LOOP_SET_FD, 3 [pid 6301] close(4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./91/file1", [pid 6303] close(4 [pid 6301] <... close resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./91/file1", [pid 6303] <... close resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6303] mkdir("./file1", 0777 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6302] <... ioctl resumed>) = 0 [pid 6301] mkdir("./file1", 0777 [pid 6303] <... mkdir resumed>) = 0 [pid 6302] close(3 [pid 6301] <... mkdir resumed>) = 0 [pid 5830] umount2("./91/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6302] <... close resumed>) = 0 [pid 6301] mount("/dev/loop2", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6303] mount("/dev/loop3", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6302] close(4 [pid 5830] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... openat resumed>) = 4 [pid 6302] <... close resumed>) = 0 [pid 6301] <... mount resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5829] newfstatat(4, "", [pid 6302] mkdir("./file1", 0777 [pid 6301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] newfstatat(4, "", [pid 6302] <... mkdir resumed>) = 0 [pid 6301] <... openat resumed>) = 3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6302] mount("/dev/loop4", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6301] chdir("./file1" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, [pid 6301] <... chdir resumed>) = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] getdents64(4, [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 6303] <... mount resumed>) = 0 [pid 6301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] getdents64(4, [pid 6301] chdir("./file0" [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 2 entries */, 32768) = 48 [pid 5829] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 6303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] getdents64(4, [pid 5829] close(4 [pid 6303] <... openat resumed>) = 3 [pid 6302] <... mount resumed>) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555557dfa730 /* 0 entries */, 32768) = 0 [pid 5829] <... close resumed>) = 0 [pid 6303] chdir("./file1" [pid 6302] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] close(4 [pid 5829] rmdir("./91/file1" [pid 6303] <... chdir resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 6301] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6302] <... openat resumed>) = 3 [pid 5830] rmdir("./91/file1" [pid 5829] <... rmdir resumed>) = 0 [pid 6303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5829] getdents64(3, [pid 6302] chdir("./file1" [pid 5830] <... rmdir resumed>) = 0 [pid 6303] chdir("./file0" [pid 6302] <... chdir resumed>) = 0 [pid 6301] <... openat resumed>) = 4 [pid 5829] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(3, [pid 6302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] close(3 [pid 6302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6301] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5829] <... close resumed>) = 0 [pid 6302] chdir("./file0" [pid 5830] <... getdents64 resumed>0x555557df26f0 /* 0 entries */, 32768) = 0 [pid 5829] rmdir("./91") = 0 [pid 5829] mkdir("./92", 0777 [pid 6303] <... chdir resumed>) = 0 [pid 6301] <... creat resumed>) = 5 [pid 5829] <... mkdir resumed>) = 0 [ 92.695940][ T6301] loop2: detected capacity change from 0 to 1024 [ 92.696677][ T6303] loop3: detected capacity change from 0 to 1024 [ 92.732460][ T6302] loop4: detected capacity change from 0 to 1024 [pid 6301] sync( [pid 5830] close(3 [pid 6303] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 6302] <... chdir resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6302] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./91" [pid 5829] <... openat resumed>) = 3 [pid 5830] <... rmdir resumed>) = 0 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 6302] <... openat resumed>) = 4 [pid 6303] <... openat resumed>) = 4 [pid 6302] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] mkdir("./92", 0777 [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3) = 0 [pid 6303] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] <... creat resumed>) = 5 ./strace-static-x86_64: Process 6304 attached [pid 6303] sync( [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6304] set_robust_list(0x555557df1660, 24 [pid 5830] <... openat resumed>) = 3 [pid 5829] <... clone resumed>, child_tidptr=0x555557df1650) = 6304 [pid 6304] <... set_robust_list resumed>) = 0 [pid 6304] chdir("./92" [pid 5830] ioctl(3, LOOP_CLR_FD) = 0 [pid 6304] <... chdir resumed>) = 0 [ 92.801342][ T6302] ------------[ cut here ]------------ [ 92.807399][ T6302] kernel BUG at fs/hfsplus/bnode.c:618! [ 92.815411][ T6302] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 92.822386][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz-executor385 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 92.833508][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.843574][ T6302] RIP: 0010:hfsplus_bnode_put+0x510/0x520 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] close(3 [pid 6304] <... prctl resumed>) = 0 [pid 6304] setpgid(0, 0) = 0 [pid 5830] <... close resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6304] write(3, "1000", 4) = 4 [pid 6304] close(3) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs" [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6304] <... symlink resumed>) = 0 executing program [pid 6304] write(1, "executing program\n", 18) = 18 [pid 6304] memfd_create("syzkaller", 0) = 3 [pid 5830] <... clone resumed>, child_tidptr=0x555557df1650) = 6305 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 ./strace-static-x86_64: Process 6305 attached [pid 6304] munmap(0x7fd6d9800000, 138412032 [pid 6305] set_robust_list(0x555557df1660, 24 [pid 6304] <... munmap resumed>) = 0 [pid 6305] <... set_robust_list resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6305] chdir("./92" [pid 6304] <... openat resumed>) = 4 [pid 6305] <... chdir resumed>) = 0 [ 92.849340][ T6302] Code: ff e9 bf fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fe ff ff 4c 89 ef e8 bb df 77 ff e9 e6 fe ff ff e8 d1 44 11 ff 90 <0f> 0b e8 c9 44 11 ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 [ 92.868976][ T6302] RSP: 0018:ffffc900046d7090 EFLAGS: 00010293 [ 92.875065][ T6302] RAX: ffffffff828394ef RBX: ffff888027efe580 RCX: ffff88802afd1e00 [ 92.883115][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.891108][ T6302] RBP: 0000000000000000 R08: ffffffff82839060 R09: 1ffff11004fdfcb0 executing program [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6305] setpgid(0, 0) = 0 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6305] write(3, "1000", 4) = 4 [pid 6305] close(3) = 0 [pid 6305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6305] write(1, "executing program\n", 18) = 18 [pid 6305] memfd_create("syzkaller", 0) = 3 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6d9800000 [ 92.899078][ T6302] R10: dffffc0000000000 R11: ffffed1004fdfcb1 R12: ffff888027efe500 [ 92.899522][ T6304] loop0: detected capacity change from 0 to 1024 [ 92.907046][ T6302] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888072192000 [ 92.907063][ T6302] FS: 0000555557df1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 92.907078][ T6302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.907091][ T6302] CR2: 0000555557e02738 CR3: 0000000011bf2000 CR4: 00000000003526f0 [ 92.907107][ T6302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.952765][ T6302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.960731][ T6302] Call Trace: [ 92.963999][ T6302] [ 92.966920][ T6302] ? __die_body+0x5f/0xb0 [ 92.971242][ T6302] ? die+0x9e/0xc0 [ 92.974950][ T6302] ? do_trap+0x15a/0x3a0 [ 92.979183][ T6302] ? hfsplus_bnode_put+0x510/0x520 [ 92.984289][ T6302] ? do_error_trap+0x1dc/0x2c0 [ 92.989046][ T6302] ? hfsplus_bnode_put+0x510/0x520 [ 92.994150][ T6302] ? __pfx_do_error_trap+0x10/0x10 [ 92.999255][ T6302] ? handle_invalid_op+0x34/0x40 [ 93.004184][ T6302] ? hfsplus_bnode_put+0x510/0x520 [ 93.009284][ T6302] ? exc_invalid_op+0x38/0x50 [ 93.013967][ T6302] ? asm_exc_invalid_op+0x1a/0x20 [ 93.018981][ T6302] ? hfsplus_bnode_put+0x80/0x520 [ 93.023994][ T6302] ? hfsplus_bnode_put+0x50f/0x520 [ 93.029101][ T6302] ? hfsplus_bnode_put+0x510/0x520 [ 93.034201][ T6302] hfsplus_bmap_alloc+0x590/0x640 [ 93.039218][ T6302] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 93.044752][ T6302] ? hfsplus_unlink+0x688/0x790 [ 93.049589][ T6302] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 93.055134][ T6302] hfs_bnode_split+0xde/0x1110 [ 93.059888][ T6302] ? hfsplus_bnode_dump+0xa36/0xbb0 [ 93.065075][ T6302] ? hfsplus_bnode_read+0xe9/0x1e0 [ 93.070177][ T6302] ? __asan_memcpy+0x40/0x70 [ 93.074759][ T6302] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 93.080299][ T6302] ? __pfx_hfs_bnode_split+0x10/0x10 [ 93.085576][ T6302] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 93.091199][ T6302] hfsplus_brec_insert+0x3a6/0xde0 [ 93.096305][ T6302] ? do_raw_spin_unlock+0x13c/0x8b0 [ 93.101499][ T6302] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 93.107299][ T6302] ? hfsplus_cat_set_perms+0x2d1/0x630 [ 93.112747][ T6302] hfsplus_create_cat+0xef5/0x1b70 [ 93.117846][ T6302] ? __lock_acquire+0x1384/0x2050 [ 93.122866][ T6302] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 93.128414][ T6302] ? do_raw_spin_unlock+0x13c/0x8b0 [ 93.133605][ T6302] ? _raw_spin_unlock+0x28/0x50 [ 93.138445][ T6302] hfsplus_mknod+0x16a/0x2a0 [ 93.143022][ T6302] ? __pfx_hfsplus_create+0x10/0x10 [ 93.148209][ T6302] path_openat+0x1c03/0x3590 [ 93.152799][ T6302] ? __pfx_path_openat+0x10/0x10 [ 93.157815][ T6302] do_filp_open+0x235/0x490 [ 93.162313][ T6302] ? __pfx_do_filp_open+0x10/0x10 [ 93.167331][ T6302] ? _raw_spin_unlock+0x28/0x50 [ 93.172166][ T6302] ? alloc_fd+0x5a1/0x640 [ 93.176490][ T6302] do_sys_openat2+0x13e/0x1d0 [ 93.181155][ T6302] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.186342][ T6302] ? _raw_spin_unlock_irq+0x2e/0x50 [ 93.191525][ T6302] ? ptrace_notify+0x279/0x380 [ 93.196277][ T6302] __x64_sys_creat+0x123/0x170 [ 93.201046][ T6302] ? __pfx___x64_sys_creat+0x10/0x10 [ 93.206320][ T6302] ? do_syscall_64+0x100/0x230 [ 93.211075][ T6302] do_syscall_64+0xf3/0x230 [ 93.215569][ T6302] ? clear_bhb_loop+0x35/0x90 [ 93.220234][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.226114][ T6302] RIP: 0033:0x7fd6e1cea259 [ 93.230532][ T6302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.250123][ T6302] RSP: 002b:00007ffc6afd22e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 93.258527][ T6302] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6e1cea259 [ 93.266489][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 93.274448][ T6302] RBP: 00000000ffffffff R08: 0000000000000800 R09: 0000000000000800 [ 93.282408][ T6302] R10: 0000000000000800 R11: 0000000000000246 R12: 00007ffc6afd2330 [ 93.290368][ T6302] R13: 00007ffc6afd2370 R14: 0000000000080000 R15: 0000000000000003 [ 93.298335][ T6302] [pid 6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6304] <... ioctl resumed>) = 0 [pid 6305] <... write resumed>) = 524288 [pid 6304] close(3 [pid 6305] munmap(0x7fd6d9800000, 138412032 [pid 6304] <... close resumed>) = 0 [pid 6304] close(4) = 0 [pid 6305] <... munmap resumed>) = 0 [pid 6304] mkdir("./file1", 0777) = 0 [pid 6304] mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 93.301343][ T6302] Modules linked in: [ 93.305718][ T6302] ---[ end trace 0000000000000000 ]--- [ 93.311512][ T6302] RIP: 0010:hfsplus_bnode_put+0x510/0x520 [ 93.317945][ T6302] Code: ff e9 bf fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fe ff ff 4c 89 ef e8 bb df 77 ff e9 e6 fe ff ff e8 d1 44 11 ff 90 <0f> 0b e8 c9 44 11 ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 [ 93.331635][ T6305] loop1: detected capacity change from 0 to 1024 [ 93.340396][ T6302] RSP: 0018:ffffc900046d7090 EFLAGS: 00010293 [pid 6305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6304] <... mount resumed>) = 0 [pid 6305] close(3) = 0 [pid 6304] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6305] close(4 [pid 6304] <... openat resumed>) = 3 [pid 6305] <... close resumed>) = 0 [pid 6304] chdir("./file1" [pid 6305] mkdir("./file1", 0777 [pid 6304] <... chdir resumed>) = 0 [pid 6305] <... mkdir resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6305] mount("/dev/loop1", "./file1", "hfsplus", MS_NODIRATIME, "" [pid 6304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6304] chdir("./file0") = 0 [pid 6304] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6304] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [pid 6304] sync( [pid 6305] <... mount resumed>) = 0 [pid 6305] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 93.350082][ T6302] RAX: ffffffff828394ef RBX: ffff888027efe580 RCX: ffff88802afd1e00 [ 93.358301][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.366790][ T6302] RBP: 0000000000000000 R08: ffffffff82839060 R09: 1ffff11004fdfcb0 [ 93.377478][ T6302] R10: dffffc0000000000 R11: ffffed1004fdfcb1 R12: ffff888027efe500 [ 93.385591][ T6302] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888072192000 [ 93.393643][ T6302] FS: 0000555557df1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [pid 6305] chdir("./file1") = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6305] chdir("./file0") = 0 [pid 6305] openat(AT_FDCWD, "./file2", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_CLOEXEC|FASYNC, 000) = 4 [pid 6305] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5 [ 93.402622][ T6302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.409243][ T6302] CR2: 0000555557e02738 CR3: 0000000011bf2000 CR4: 00000000003526f0 [ 93.417592][ T6302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.426362][ T6302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.434405][ T6302] Kernel panic - not syncing: Fatal exception [ 93.440710][ T6302] Kernel Offset: disabled [ 93.445024][ T6302] Rebooting in 86400 seconds..